From 29491421f02c7b427b6c57b20d276ff2cc438fbe Mon Sep 17 00:00:00 2001 From: Marcellus Tavares Date: Tue, 12 Dec 2023 10:06:32 -0800 Subject: [PATCH] LRAC-15206 Remove spring-web:5.3.31 vunerable code References https://github.com/spring-projects/spring-framework/issues/24434#issuecomment-744519525 https://github.com/spring-projects/spring-framework/issues/24434#issuecomment-1385730597 --- .../bnd.bnd | 2 ++ .../build.gradle | 23 +++++++++++++++++++ 2 files changed, 25 insertions(+) create mode 100644 modules/third-party/org-springframework-spring-spring-web-5.3.31/bnd.bnd create mode 100644 modules/third-party/org-springframework-spring-spring-web-5.3.31/build.gradle diff --git a/modules/third-party/org-springframework-spring-spring-web-5.3.31/bnd.bnd b/modules/third-party/org-springframework-spring-spring-web-5.3.31/bnd.bnd new file mode 100644 index 00000000000000..adf85cb8e2d72f --- /dev/null +++ b/modules/third-party/org-springframework-spring-spring-web-5.3.31/bnd.bnd @@ -0,0 +1,2 @@ +Bundle-SymbolicName: org.springframework.spring.web +Bundle-Version: 5.3.31.LIFERAY-PATCHED-1 \ No newline at end of file diff --git a/modules/third-party/org-springframework-spring-spring-web-5.3.31/build.gradle b/modules/third-party/org-springframework-spring-spring-web-5.3.31/build.gradle new file mode 100644 index 00000000000000..fbeddb97f3ac4f --- /dev/null +++ b/modules/third-party/org-springframework-spring-spring-web-5.3.31/build.gradle @@ -0,0 +1,23 @@ +import com.liferay.gradle.plugins.patcher.PatchTask + +apply plugin: "com.liferay.patcher" + +task patch(type: PatchTask) + +dependencies { + api group: "org.springframework", name: 'spring-web', version: '5.3.31' +} + +jar { + doFirst { + exclude ("org/springframework/remoting/httpinvoker/**") + } +} + +patch { + ext { + autoClean = false + } + + originalLibModuleName = "spring-web" +} \ No newline at end of file