kuailexs/X-SpringBoot
1
0
Fork 0
mirror of https://github.com/yzcheng90/X-SpringBoot synced 2025-11-05 14:41:05 +08:00
Code Issues Packages Projects Releases Wiki Activity
92 Commits 3 Branches 2 Tags
springboot2x-jdk1.8
Commit Graph

92 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
czx
7768755f42 Update README.md 2024-12-04 17:43:07 +08:00
czx
4ff50a16c6 add @EnableAsync 2024-12-03 10:50:27 +08:00
czx
81aa1de0db Update README.md 2024-11-20 18:05:45 +08:00
czx
2d4aaa6f3c Update README.md 2024-11-20 18:05:06 +08:00
czx
1e8fce2423 Merge pull request #34 from BulkSecurityGeneratorProjectV2/fix/JLL/use_https_to_resolve_dependencies_maven 
[SECURITY] Use HTTPS to resolve dependencies in Maven Build
 2024-02-19 13:49:19 +08:00
czx
225166f02e Update README.md 2024-02-01 14:02:40 +08:00
Jonathan Leitschuh
56a183beda vuln-fix: Use HTTPS instead of HTTP to resolve deps CVE-2021-26291 
This fixes a security vulnerability in this project where the `pom.xml`
files were configuring Maven to resolve dependencies over HTTP instead of
HTTPS.

Weakness: CWE-829: Inclusion of Functionality from Untrusted Control Sphere
Severity: High
CVSS: 8.1
Detection: CodeQL & OpenRewrite (https://app.moderne.io/recipes/org.openrewrite.maven.security.UseHttpsForRepositories)

Reported-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>
Signed-off-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>

Bug-tracker: https://github.com/JLLeitschuh/security-research/issues/8
Detection: CodeQL (https://codeql.github.com/codeql-query-help/java/java-maven-non-https-url/) & OpenRewrite (https://app.moderne.io/recipes/org.openrewrite.maven.security.UseHttpsForRepositories)

Reported-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>
Signed-off-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>

Bug-tracker: https://github.com/JLLeitschuh/security-research/issues/8


Use this link to re-run the recipe: https://app.moderne.io/recipes/builder/IfHkrYfxx?organizationId=QWxsIEdpdEh1Yg%3D%3D

Co-authored-by: Moderne <team@moderne.io>
 2023-12-17 03:31:21 +00:00
yzcheng90
57a012318a 菜单新增修改 2023-08-17 17:57:15 +08:00
yzcheng90
dfae0a4a71 修改 2023-08-15 18:27:58 +08:00
czx
7bae55662f 更新依赖 2023-08-14 22:57:50 +08:00
czx
c56c59a49b Update README.md 2023-05-06 13:33:44 +08:00
czx
8f32f7cb3f Update README.md 2023-05-06 13:33:14 +08:00
czx
4cc5e652a3 Update README.md 2023-05-06 13:32:59 +08:00
czx
5875c7a039 Update README.md 2023-05-06 13:32:45 +08:00
czx
7de7da42b4 Merge pull request #29 from yzcheng90/dependabot/maven/commons-fileupload-commons-fileupload-1.5 
Bump commons-fileupload from 1.3.3 to 1.5
 2023-04-23 09:26:30 +08:00
dependabot[bot]
d50268f20b Bump commons-fileupload from 1.3.3 to 1.5 
Bumps commons-fileupload from 1.3.3 to 1.5.

---
updated-dependencies:
- dependency-name: commons-fileupload:commons-fileupload
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-02-22 07:03:21 +00:00
yzcheng90
14e158530f 修复Swagger问题 2023-02-17 14:23:27 +08:00
yzcheng90
f49d9acfeb 精简代码 2023-01-29 15:02:11 +08:00
yzcheng90
813ae19ec2 提交 2023-01-29 14:42:47 +08:00
yzcheng90
8a622a3161 提交 2023-01-29 14:38:05 +08:00
czx
bc0509e763 Update WebConfigurer.java 2023-01-23 11:04:42 +08:00
czx
e858cf1fd8 Update README.md 2023-01-22 17:54:46 +08:00
czx
7bb21b4152 Update updateLog.md 2023-01-22 17:53:53 +08:00
czx
cce49f4cc2 Update README.md 5.0 2023-01-22 17:52:11 +08:00
czx
f779781336 Update README.md 2023-01-22 17:51:09 +08:00
czx
a465c05019 提交代码 2023-01-22 17:49:39 +08:00
yzcheng90
aaf4134de0 提交 2023-01-18 15:29:40 +08:00
yzcheng90
b6bf720318 Update README.md 2023-01-16 17:15:48 +08:00
yzcheng90
c516473dd2 升级依赖 2023-01-16 17:13:43 +08:00
czx
8875d59c56 Merge pull request #25 from yzcheng90/dependabot/maven/com.google.code.gson-gson-2.8.9 
Bump gson from 2.8.6 to 2.8.9
 2022-10-26 10:37:57 +08:00
czx
11c53ead48 Merge pull request #26 from yzcheng90/dependabot/maven/mysql-mysql-connector-java-8.0.28 
Bump mysql-connector-java from 8.0.16 to 8.0.28
 2022-10-26 10:36:42 +08:00
dependabot[bot]
beac92e965 Bump mysql-connector-java from 8.0.16 to 8.0.28 
Bumps [mysql-connector-java](https://github.com/mysql/mysql-connector-j) from 8.0.16 to 8.0.28.
- [Release notes](https://github.com/mysql/mysql-connector-j/releases)
- [Changelog](https://github.com/mysql/mysql-connector-j/blob/release/8.0/CHANGES)
- [Commits](https://github.com/mysql/mysql-connector-j/compare/8.0.16...8.0.28)

---
updated-dependencies:
- dependency-name: mysql:mysql-connector-java
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-06-20 23:42:13 +00:00
dependabot[bot]
759fd08597 Bump gson from 2.8.6 to 2.8.9 
Bumps [gson](https://github.com/google/gson) from 2.8.6 to 2.8.9.
- [Release notes](https://github.com/google/gson/releases)
- [Changelog](https://github.com/google/gson/blob/master/CHANGELOG.md)
- [Commits](https://github.com/google/gson/compare/gson-parent-2.8.6...gson-parent-2.8.9)

---
updated-dependencies:
- dependency-name: com.google.code.gson:gson
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-05-20 21:20:41 +00:00
czx
c818ddaeb0 Merge pull request #23 from yzcheng90/dependabot/maven/commons-io-commons-io-2.7 
Bump commons-io from 2.5 to 2.7
 2021-05-26 17:26:06 +08:00
yzcheng90
c7cdb7a962 更新v4.0 2021-05-24 14:35:05 +08:00
dependabot[bot]
f8803be4dc Bump commons-io from 2.5 to 2.7 
Bumps commons-io from 2.5 to 2.7.

Signed-off-by: dependabot[bot] <support@github.com>
 2021-04-26 17:19:14 +00:00
yzcheng90
472ac25dc1 update 2020-07-21 11:51:11 +08:00
yzcheng90
1420389a66 Update updateLog.md 2020-05-19 17:36:05 +08:00
yzcheng90
66efa8676f 修复一些bug 2020-05-19 17:34:41 +08:00
yzcheng90
e6d49788f7 fix bug 2020-04-22 17:03:56 +08:00
yzcheng90
8850a8aa70 修复一些bug 
修复一些bug
 2020-01-10 12:33:36 +08:00
yzcheng90
5197b00fb9 修复一些bug 
修复一些bug
 2020-01-10 12:30:07 +08:00
yzcheng90
2c70aeedf5 Update db.sql 2019-12-27 17:09:41 +08:00
yzcheng90
472a355702 更新版本3.0 
最大改变：
shiro 替换为 security
 2019-12-26 17:32:21 +08:00
yzcheng90
0e34a3652b . 2.1.2 2019-12-16 17:34:49 +08:00
czx
7330790421 . 2019-08-18 20:10:15 +08:00
czx
a53dbd648a . 2019-08-08 00:04:26 +08:00
czx
32ce0d0c59 更新版本2.1.2 2019-08-08 00:03:11 +08:00
czx
f6ddd04217 修复了一些bug 2019-07-03 22:46:06 +08:00
czx
364a6b7b37 update version to 2.1 2019-05-02 20:44:20 +08:00