使用log4j-over-slf4j取代log4j避免log4j漏洞

3 years ago · e728233781
1 changed files with 5 additions and 3 deletions
--- a/pom.xml
+++ b/pom.xml
@ -148,12 +148,14 @@
 			<version>1.3.0-91</version>
 		</dependency>

+		<!-- 取代log4j -->
 		<dependency>
-			<groupId>log4j</groupId>
-			<artifactId>log4j</artifactId>
-			<version>1.2.17</version>
+			<groupId>org.slf4j</groupId>
+			<artifactId>log4j-over-slf4j</artifactId>
+			<version>1.7.35</version>
 		</dependency>

+
 		<!-- xml解析库 -->
 		<dependency>
 			<groupId>org.dom4j</groupId>