Pārlūkot izejas kodu

log4j 취약점 방어를 위한 log4j 제거

gagamel 4 gadi atpakaļ
vecāks
revīzija
50b2cbb214
1 mainītis faili ar 10 papildinājumiem un 0 dzēšanām
  1. 10 0
      pom.xml

+ 10 - 0
pom.xml

@@ -24,6 +24,16 @@
 		<dependency>
 			<groupId>org.springframework.boot</groupId>
 			<artifactId>spring-boot-starter-security</artifactId>
+			<exclusions>
+				<exclusion>
+					<groupId>org.apache.logging.log4j</groupId>
+					<artifactId>log4j-api</artifactId>
+				</exclusion>
+				<exclusion>
+					<groupId>org.apache.logging.log4j</groupId>
+					<artifactId>log4j-to-slf4j</artifactId>
+				</exclusion>
+			</exclusions>
 		</dependency>
 		<dependency>
 			<groupId>org.springframework.security</groupId>