dubey/WebGoat
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Update enforcer and exclude log4j-core completely (every version)

Browse Source
This commit is contained in:
Nanne Baars 2021-12-21 10:05:12 +01:00
parent 7ded0968c1
commit 85d4633f62
No known key found for this signature in database
GPG Key ID: A6D6C06FE4EC14E7
1 changed files with 13 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
pom.xml
View File

@ -187,6 +187,16 @@
</execution> </execution>
</executions> </executions>
</plugin> </plugin>
<plugin>
<groupId>org.apache.maven.plugins</groupId>
<artifactId>maven-compiler-plugin</artifactId>
<version>${maven-compiler-plugin.version}</version>
<configuration>
<source>15</source>
<target>15</target>
<encoding>UTF-8</encoding>
</configuration>
</plugin>
<plugin> <plugin>
<groupId>org.apache.maven.plugins</groupId> <groupId>org.apache.maven.plugins</groupId>
<artifactId>maven-checkstyle-plugin</artifactId> <artifactId>maven-checkstyle-plugin</artifactId>
@ -229,7 +239,7 @@
<version>3.0.0</version> <version>3.0.0</version>
<executions> <executions>
<execution> <execution>
<id>Restrict-bad-log4j-versions</id> <id>restrict-log4j-versions</id>
<phase>validate</phase> <phase>validate</phase>
<goals> <goals>
<goal>enforce</goal> <goal>enforce</goal>
@ -237,8 +247,8 @@
<configuration> <configuration>
<rules> <rules>
<bannedDependencies> <bannedDependencies>
<excludes> <excludes combine.children="append">
<exclude>org.apache.logging.log4j:log4j-core:(,2.15.0)</exclude> <exclude>org.apache.logging.log4j:log4j-core</exclude>
</excludes> </excludes>
</bannedDependencies> </bannedDependencies>
</rules> </rules>