<?xml version="1.0" encoding="UTF-8"?>

<project xmlns="http://maven.apache.org/POM/4.0.0"

xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"

xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">

<modelVersion>4.0.0</modelVersion>

<groupId>top.whgojp</groupId>

<artifactId>JavaSecLab</artifactId>

<version>1.0.0</version>

<name>Java综合漏洞平台</name>

<description>hello JavaSec!</description>

<parent>

<groupId>org.springframework.boot</groupId>

<artifactId>spring-boot-starter-parent</artifactId>

<!-- springboot 高版本不存在thymeleaf模板注入漏洞-->

<version>2.4.1</version>

<relativePath/>

</parent>

<properties>

<maven.compiler.source>8</maven.compiler.source>

<maven.compiler.target>8</maven.compiler.target>

<project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>

<swagger.version>3.0.0</swagger.version>

<hutool.version>5.8.21</hutool.version>

<lombok.version>1.18.4</lombok.version>

<mybatis-plus.version>3.5.1</mybatis-plus.version>

<mysql.version>8.0.33</mysql.version>

<esapi.version>2.2.0.0</esapi.version>

<jwt.version>0.10.7</jwt.version>

</properties>

<dependencies>

<!-- Spring Boot Starters -->

<dependency>

<groupId>org.springframework.boot</groupId>

<artifactId>spring-boot-starter-web</artifactId>

</dependency>

<dependency>

<groupId>org.springframework.boot</groupId>

<artifactId>spring-boot-starter-data-jpa</artifactId>

</dependency>

<dependency>

<groupId>org.springframework.boot</groupId>

<artifactId>spring-boot-starter-thymeleaf</artifactId>

<version>2.4.1</version>

</dependency>

<dependency>

<groupId>org.springframework.boot</groupId>

<artifactId>spring-boot-starter-security</artifactId>

</dependency>

<dependency>

<groupId>org.springframework.boot</groupId>

<artifactId>spring-boot-starter-actuator</artifactId>

</dependency>

<dependency>

<groupId>org.springframework.boot</groupId>

<artifactId>spring-boot-starter-jdbc</artifactId>

</dependency>

<dependency>

<groupId>org.springframework.boot</groupId>

<artifactId>spring-boot-devtools</artifactId>

<scope>runtime</scope> <!-- 确保仅在开发中使用 -->

<optional>true</optional>

</dependency>

<dependency>

<groupId>org.springframework.boot</groupId>

<artifactId>spring-boot-starter-test</artifactId>

<scope>test</scope>

</dependency>

<dependency>

<groupId>com.alibaba</groupId>

<artifactId>druid-spring-boot-starter</artifactId>

<version>1.2.16</version>

</dependency>

<!-- <dependency>-->

<!-- <groupId>org.springframework.boot</groupId>-->

<!-- <artifactId>spring-boot-starter-webflux</artifactId>-->

<!-- </dependency>-->

<!-- <dependency>-->

<!-- <groupId>org.springframework.cloud</groupId>-->

<!-- <artifactId>spring-cloud-starter-gateway</artifactId>-->

<!-- <version>3.1.0</version>-->

<!-- </dependency>-->

<!-- JSP和Servlet支持 -->

<!-- <dependency>-->

<!-- <groupId>org.springframework.boot</groupId>-->

<!-- <artifactId>spring-boot-starter-tomcat</artifactId>-->

<!-- </dependency>-->

<!-- <dependency>-->

<!-- <groupId>org.apache.tomcat.embed</groupId>-->

<!-- <artifactId>tomcat-embed-jasper</artifactId>-->

<!-- <scope>provided</scope>-->

<!-- </dependency>-->

<!-- <dependency>-->

<!-- <groupId>javax.servlet</groupId>-->

<!-- <artifactId>javax.servlet-api</artifactId>-->

<!-- <scope>provided</scope>-->

<!-- </dependency>-->

<!-- <dependency>-->

<!-- <groupId>javax.servlet</groupId>-->

<!-- <artifactId>jstl</artifactId>-->

<!-- </dependency>-->

<!-- 数据库 -->

<dependency>

<groupId>com.mysql</groupId>

<artifactId>mysql-connector-j</artifactId>

<version>${mysql.version}</version>

</dependency>

<!-- MyBatis Plus -->

<dependency>

<groupId>com.baomidou</groupId>

<artifactId>mybatis-plus-boot-starter</artifactId>

<version>${mybatis-plus.version}</version>

</dependency>

<!-- JWT -->

<dependency>

<groupId>io.jsonwebtoken</groupId>

<artifactId>jjwt-api</artifactId>

<version>${jwt.version}</version>

</dependency>

<dependency>

<groupId>io.jsonwebtoken</groupId>

<artifactId>jjwt-impl</artifactId>

<version>${jwt.version}</version>

<scope>runtime</scope>

</dependency>

<dependency>

<groupId>io.jsonwebtoken</groupId>

<artifactId>jjwt-jackson</artifactId>

<version>${jwt.version}</version>

<scope>runtime</scope>

</dependency>

<!-- 工具库 -->

<dependency>

<groupId>cn.hutool</groupId>

<artifactId>hutool-all</artifactId>

<version>${hutool.version}</version>

</dependency>

<!-- 安全 -->

<dependency>

<groupId>org.owasp.esapi</groupId>

<artifactId>esapi</artifactId>

<version>${esapi.version}</version>

</dependency>

<!-- Swagger -->

<dependency>

<groupId>io.springfox</groupId>

<artifactId>springfox-boot-starter</artifactId>

<version>${swagger.version}</version>

</dependency>

<!-- Lombok -->

<dependency>

<groupId>org.projectlombok</groupId>

<artifactId>lombok</artifactId>

<version>${lombok.version}</version>

<scope>provided</scope>

</dependency>

<!-- UEditor -->

<dependency>

<groupId>com.gitee.qdbp.thirdparty</groupId>

<artifactId>ueditor</artifactId>

<version>1.4.3.3</version>

</dependency>

<!-- Commons -->

<dependency>

<groupId>commons-fileupload</groupId>

<artifactId>commons-fileupload</artifactId>

<version>1.3.2</version>

</dependency>

<dependency>

<groupId>commons-codec</groupId>

<artifactId>commons-codec</artifactId>

<version>1.9</version>

</dependency>

<dependency>

<groupId>org.springframework.boot</groupId>

<artifactId>spring-boot-starter-tomcat</artifactId>

<scope>provided</scope>

</dependency>

<!-- Java反序列化-->

<!-- <dependency>-->

<!-- <groupId>commons-io</groupId>-->

<!-- <artifactId>commons-io</artifactId>-->

<!-- <version>2.11.0</version>-->

<!-- </dependency>-->

<!-- <dependency>-->

<!-- <groupId>commons-collections</groupId>-->

<!-- <artifactId>commons-collections</artifactId>-->

<!-- <version>3.2.1</version>-->

<!-- </dependency>-->

<dependency>

<groupId>org.codehaus.groovy</groupId>

<artifactId>groovy-all</artifactId>

<version>2.5.6</version>

<type>pom</type>

</dependency>

<dependency>

<groupId>com.alibaba</groupId>

<artifactId>fastjson</artifactId>

<version>1.2.37</version>

</dependency>

<!-- CVE-2020-26217 version<1.4.13

<dependency>

<groupId>com.thoughtworks.xstream</groupId>

<artifactId>xstream</artifactId>

<version>1.4.14</version>

</dependency>

<!-- log4Shell -->

<dependency>

<groupId>org.apache.logging.log4j</groupId>

<artifactId>log4j-core</artifactId>

<version>2.8.2</version>

</dependency>

<dependency>

<groupId>org.apache.logging.log4j</groupId>

<artifactId>log4j-api</artifactId>

<version>2.8.2</version>

</dependency>

<dependency>

<groupId>org.apache.commons</groupId>

<artifactId>commons-text</artifactId>

<version>1.9</version> <!-- 使用最新稳定版本 -->

</dependency>

<!-- shiro-550 -->

<dependency>

<groupId>org.apache.shiro</groupId>

<artifactId>shiro-spring</artifactId>

<version>1.2.4</version>

</dependency>

<dependency>

<groupId>org.javassist</groupId>

<artifactId>javassist</artifactId>

<version>3.29.0-GA</version> <!-- 或更高版本 -->

</dependency>

<dependency>

<groupId>org.springframework</groupId>

<artifactId>spring-tx</artifactId>

</dependency>

</dependencies>

<build>

<finalName>JavaSecLab</finalName>

<plugins>

<!-- Maven Surefire Plugin -->

<plugin>

<groupId>org.apache.maven.plugins</groupId>

<artifactId>maven-surefire-plugin</artifactId>

<configuration>

<skip>true</skip> <!-- 打包时跳过测试 -->

</configuration>

</plugin>

<!-- Spring Boot Maven Plugin -->

<plugin>

<groupId>org.springframework.boot</groupId>

<artifactId>spring-boot-maven-plugin</artifactId>

<configuration>

<mainClass>top.whgojp.Application</mainClass>

<jvmArguments>-Dorg.apache.commons.collections.enableUnsafeSerialization=true</jvmArguments>

</configuration>

</plugin>

</plugins>

</build>

<repositories>

<repository>

<id>central</id>

<url>https://repo.maven.apache.org/maven2</url>

</repository>

<repository>

<id>spring-milestone</id>

<url>https://repo.spring.io/milestone</url>

</repository>

<repository>

<id>spring-release</id>

<url>https://repo.spring.io/release</url>

</repository>

<repository>

<id>acfunnexus</id>

<url>https://maven.aliyun.com/repository/public/</url>

<layout>default</layout>

<releases>

<enabled>true</enabled>

</releases>

<snapshots>

<enabled>true</enabled>

</snapshots>

</repository>

</repositories>

</project>