From 957c2a88fd0c04a9739519afc5cfca8b0a14d578 Mon Sep 17 00:00:00 2001
From: wangw <1594593906@qq.com>
Date: Sat, 8 Feb 2025 10:09:26 +0800
Subject: [PATCH] =?UTF-8?q?=E4=BE=9D=E8=B5=96=E6=BC=8F=E6=B4=9E=E7=AE=A1?=
 =?UTF-8?q?=E7=90=86?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 cash-api/pom.xml                         | 27 +++++++++++++++++++++---
 cash-common/cash-common-sa-token/pom.xml |  9 +-------
 cash-dependencies/pom.xml                | 21 ++++++++++++++++++
 3 files changed, 46 insertions(+), 11 deletions(-)

diff --git a/cash-api/pom.xml b/cash-api/pom.xml
index 580100f3..f75aaebc 100644
--- a/cash-api/pom.xml
+++ b/cash-api/pom.xml
@@ -29,9 +29,18 @@
         <dependency>
             <groupId>org.springframework.boot</groupId>
             <artifactId>spring-boot-starter-web</artifactId>
+            <exclusions>
+                <exclusion>
+                    <groupId>org.apache.tomcat.embed</groupId>
+                    <artifactId>tomcat-embed-core</artifactId>
+                </exclusion>
+            </exclusions>
         </dependency>
-
-        <!-- Spring Boot与Nacos整合的核心依赖 -->
+        <dependency>
+            <groupId>org.apache.tomcat.embed</groupId>
+            <artifactId>tomcat-embed-core</artifactId>
+        </dependency>
+        <!-- Spring Boot与nacos整合的核心依赖 -->
         <dependency>
             <groupId>com.alibaba.cloud</groupId>
             <artifactId>spring-cloud-starter-alibaba-nacos-discovery</artifactId>
@@ -51,11 +60,23 @@
             <version>4.1.4</version>
         </dependency>
 
+        <!--openfeign依赖-->
+        <!--start-->
         <dependency>
             <groupId>org.springframework.cloud</groupId>
             <artifactId>spring-cloud-starter-openfeign</artifactId>
             <version>4.2.0</version>
+            <exclusions>
+                <exclusion>
+                    <groupId>commons-io</groupId>
+                    <artifactId>commons-io</artifactId>
+                </exclusion>
+            </exclusions>
         </dependency>
-
+        <dependency>
+            <groupId>commons-io</groupId>
+            <artifactId>commons-io</artifactId>
+        </dependency>
+        <!--end-->
     </dependencies>
 </project>
diff --git a/cash-common/cash-common-sa-token/pom.xml b/cash-common/cash-common-sa-token/pom.xml
index 4274921f..3b3c3634 100644
--- a/cash-common/cash-common-sa-token/pom.xml
+++ b/cash-common/cash-common-sa-token/pom.xml
@@ -16,22 +16,15 @@
             <groupId>com.czg</groupId>
             <artifactId>cash-common-tools</artifactId>
         </dependency>
-        <!-- sa-token 的漏洞的依赖处理 -->
+        <!-- Sa-Token 权限认证，在线文档：https://sa-token.cc -->
         <!-- start -->
         <dependency>
             <groupId>cn.dev33</groupId>
             <artifactId>sa-token-spring-boot3-starter</artifactId>
-            <exclusions>
-                <exclusion>
-                    <groupId>org.apache.tomcat.embed</groupId>
-                    <artifactId>tomcat-embed-core</artifactId>
-                </exclusion>
-            </exclusions>
         </dependency>
         <dependency>
             <groupId>org.apache.tomcat.embed</groupId>
             <artifactId>tomcat-embed-core</artifactId>
-            <version>11.0.2</version>
         </dependency>
         <!-- end -->
     </dependencies>
diff --git a/cash-dependencies/pom.xml b/cash-dependencies/pom.xml
index 42e785d9..cf15df04 100644
--- a/cash-dependencies/pom.xml
+++ b/cash-dependencies/pom.xml
@@ -20,6 +20,8 @@
         <quartz.version>2.3.2</quartz.version>
         <fastjson2.version>2.0.54</fastjson2.version>
         <sa-token.version>1.40.0</sa-token.version>
+        <commons-io.version>2.14.0</commons-io.version>
+        <tomcat-embed-core.version>11.0.2</tomcat-embed-core.version>
     </properties>
 
     <dependencyManagement>
@@ -30,10 +32,29 @@
                 <version>1.0.0</version>
             </dependency>
             <!-- Sa-Token 权限认证，在线文档：https://sa-token.cc -->
+            <!-- sa-token 的漏洞的依赖处理 -->
+            <!-- sa-token start -->
             <dependency>
                 <groupId>cn.dev33</groupId>
                 <artifactId>sa-token-spring-boot3-starter</artifactId>
                 <version>${sa-token.version}</version>
+                <exclusions>
+                    <exclusion>
+                        <groupId>org.apache.tomcat.embed</groupId>
+                        <artifactId>tomcat-embed-core</artifactId>
+                    </exclusion>
+                </exclusions>
+            </dependency>
+            <dependency>
+                <groupId>org.apache.tomcat.embed</groupId>
+                <artifactId>tomcat-embed-core</artifactId>
+                <version>${tomcat-embed-core.version}</version>
+            </dependency>
+            <!-- sa-token end -->
+            <dependency>
+                <groupId>commons-io</groupId>
+                <artifactId>commons-io</artifactId>
+                <version>${commons-io.version}</version>
             </dependency>
             <dependency>
                 <groupId>com.github.whvcse</groupId>