Ver Fonte

Override vulnerable Log4J version in mirai-console-gradle

Him188 há 3 anos atrás
pai
commit
16bbfdd36a
1 ficheiros alterados com 4 adições e 0 exclusões
  1. 4 0
      mirai-console/tools/gradle-plugin/build.gradle.kts

+ 4 - 0
mirai-console/tools/gradle-plugin/build.gradle.kts

@@ -40,6 +40,10 @@ dependencies {
     api("com.github.jengelman.gradle.plugins:shadow:6.0.0")
     api(`jetbrains-annotations`)
 
+    // override vulnerable Log4J version
+    // https://blog.gradle.org/log4j-vulnerability
+    implementation(`log4j-api`)
+    implementation(`log4j-core`)
 
     testApi(kotlin("test-junit5"))
     testApi("org.junit.jupiter:junit-jupiter-api:${Versions.junit}")