LRAC-15206 Remove spring-web:5.3.31 vunerable code

References spring-projects/spring-framework#24434 (comment) spring-projects/spring-framework#24434 (comment)
marcellustavares · Dec 12, 2023 · 2949142 · 2949142
1 parent 78aa5f5
commit 2949142
Show file tree

Hide file tree

Showing 2 changed files with 25 additions and 0 deletions.
diff --git a/modules/third-party/org-springframework-spring-spring-web-5.3.31/bnd.bnd b/modules/third-party/org-springframework-spring-spring-web-5.3.31/bnd.bnd
@@ -0,0 +1,2 @@
+Bundle-SymbolicName: org.springframework.spring.web
+Bundle-Version: 5.3.31.LIFERAY-PATCHED-1
diff --git a/modules/third-party/org-springframework-spring-spring-web-5.3.31/build.gradle b/modules/third-party/org-springframework-spring-spring-web-5.3.31/build.gradle
@@ -0,0 +1,23 @@
+import com.liferay.gradle.plugins.patcher.PatchTask
+
+apply plugin: "com.liferay.patcher"
+
+task patch(type: PatchTask)
+
+dependencies {
+	api group: "org.springframework", name: 'spring-web', version: '5.3.31'
+}
+
+jar {
+	doFirst {
+		exclude ("org/springframework/remoting/httpinvoker/**")
+	}
+}
+
+patch {
+	ext {
+		autoClean = false
+	}
+
+	originalLibModuleName = "spring-web"
+}