56c00022cd
In Eclipse Jetty, versions 9.2.x and older, 9.3.x (all configurations), and 9.4.x (non-default configuration with RFC2616 compliance enabled), HTTP/0.9 is handled poorly. An HTTP/1 style request line (i.e. method space URI space version) that declares a version of HTTP/0.9 was accepted and treated as a 0.9 request. If deployed behind an intermediary that also accepted and passed through the 0.9 version (but did not act on it), then the response sent could be interpreted by the intermediary as HTTP/1 headers. This could be used to poison the cache if the server allowed the origin client to generate arbitrary content in the response.
384 lines
12 KiB
XML
384 lines
12 KiB
XML
<?xml version="1.0"?>
|
||
<project
|
||
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
|
||
xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd"
|
||
xmlns="http://maven.apache.org/POM/4.0.0">
|
||
<modelVersion>4.0.0</modelVersion>
|
||
<groupId>com.github.binarywang</groupId>
|
||
<artifactId>weixin-java-parent</artifactId>
|
||
<version>3.2.0</version>
|
||
<packaging>pom</packaging>
|
||
<name>Weixin Java Tools - Parent</name>
|
||
<description>微信开发Java SDK</description>
|
||
<url>https://github.com/wechat-group/weixin-java-tools</url>
|
||
|
||
<licenses>
|
||
<license>
|
||
<name>The Apache License, Version 2.0</name>
|
||
<url>http://www.apache.org/licenses/LICENSE-2.0.txt</url>
|
||
</license>
|
||
</licenses>
|
||
|
||
<developers>
|
||
<developer>
|
||
<name>Daniel Qian</name>
|
||
<email>chanjarster@gmail.com</email>
|
||
<url>https://github.com/chanjarster</url>
|
||
</developer>
|
||
<developer>
|
||
<name>Binary Wang</name>
|
||
<email>binarywang@gmail.com</email>
|
||
<url>https://github.com/binarywang</url>
|
||
</developer>
|
||
<developer>
|
||
<name>gaigeshen</name>
|
||
<email>gaigeshen@qq.com</email>
|
||
<url>https://github.com/gaigeshen</url>
|
||
</developer>
|
||
<developer>
|
||
<name>Liu Mingbo</name>
|
||
<email>liumingbo2008@gmail.com</email>
|
||
<url>https://github.com/FirenzesEagle</url>
|
||
</developer>
|
||
<developer>
|
||
<name>kakotor</name>
|
||
<email>kakotor@gmail.com</email>
|
||
<url>https://github.com/kakotor</url>
|
||
</developer>
|
||
<developer>
|
||
<name>xiong</name>
|
||
<email>zhaoxiong.tan@gmail.com</email>
|
||
<url>https://github.com/ZhaoxiongTan</url>
|
||
</developer>
|
||
<developer>
|
||
<name>LiuJunGuang</name>
|
||
<email>aimilin@yeah.net</email>
|
||
<url>https://github.com/aimilin6688</url>
|
||
</developer>
|
||
<developer>
|
||
<name>Eric.Tsai</name>
|
||
<email>xiaodong.cai.ks@gmail.com</email>
|
||
<url>https://github.com/iwareserictsai</url>
|
||
</developer>
|
||
<developer>
|
||
<name>withinthefog</name>
|
||
<email>withinthefog@gmail.com</email>
|
||
<url>https://github.com/withinthefog</url>
|
||
</developer>
|
||
<developer>
|
||
<name>Keung</name>
|
||
<email>dongfuqiang1988@163.com</email>
|
||
<url>https://github.com/johnnytung</url>
|
||
</developer>
|
||
<developer>
|
||
<name>Jonk</name>
|
||
<email>aimilin@yeah.net</email>
|
||
<url>https://github.com/aimilin6688</url>
|
||
</developer>
|
||
<developer>
|
||
<name>ecoolper</name>
|
||
<email>crskyp@gmail.com</email>
|
||
<url>https://github.com/crskyp</url>
|
||
</developer>
|
||
<developer>
|
||
<name>007</name>
|
||
<email>007gzs@gmail.com</email>
|
||
<url>https://github.com/007gzs</url>
|
||
</developer>
|
||
</developers>
|
||
|
||
<scm>
|
||
<connection>scm:git:https://github.com/wechat-group/weixin-java-tools.git</connection>
|
||
<developerConnection>scm:git:git@github.com:wechat-group/weixin-java-tools.git</developerConnection>
|
||
<url>https://github.com/wechat-group/weixin-java-tools</url>
|
||
</scm>
|
||
|
||
<modules>
|
||
<module>weixin-java-common</module>
|
||
<module>weixin-java-cp</module>
|
||
<module>weixin-java-mp</module>
|
||
<module>weixin-java-pay</module>
|
||
<module>weixin-java-miniapp</module>
|
||
<module>weixin-java-open</module>
|
||
<!--module>weixin-java-osgi</module-->
|
||
</modules>
|
||
|
||
<properties>
|
||
<maven.compiler.source>1.7</maven.compiler.source>
|
||
<maven.compiler.target>1.7</maven.compiler.target>
|
||
|
||
<project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
|
||
<httpclient.version>4.5</httpclient.version>
|
||
<jetty.version>9.3.24.v20180605</jetty.version>
|
||
</properties>
|
||
|
||
<dependencyManagement>
|
||
<dependencies>
|
||
<dependency>
|
||
<groupId>com.github.binarywang</groupId>
|
||
<artifactId>qrcode-utils</artifactId>
|
||
<version>1.1</version>
|
||
</dependency>
|
||
<!-- 由于jodd-http较新的3.8版本需要jdk8，故而此处采用较低版本 -->
|
||
<dependency>
|
||
<groupId>org.jodd</groupId>
|
||
<artifactId>jodd-http</artifactId>
|
||
<version>3.7.1</version>
|
||
<scope>provided</scope>
|
||
</dependency>
|
||
<dependency>
|
||
<groupId>com.squareup.okhttp3</groupId>
|
||
<artifactId>okhttp</artifactId>
|
||
<version>3.7.0</version>
|
||
<scope>provided</scope>
|
||
</dependency>
|
||
|
||
<dependency>
|
||
<groupId>org.apache.httpcomponents</groupId>
|
||
<artifactId>httpclient</artifactId>
|
||
<version>${httpclient.version}</version>
|
||
</dependency>
|
||
<dependency>
|
||
<groupId>org.apache.httpcomponents</groupId>
|
||
<artifactId>httpmime</artifactId>
|
||
<version>${httpclient.version}</version>
|
||
</dependency>
|
||
<dependency>
|
||
<groupId>commons-codec</groupId>
|
||
<artifactId>commons-codec</artifactId>
|
||
<version>1.10</version>
|
||
</dependency>
|
||
<dependency>
|
||
<groupId>commons-io</groupId>
|
||
<artifactId>commons-io</artifactId>
|
||
<version>2.5</version>
|
||
</dependency>
|
||
<dependency>
|
||
<groupId>org.apache.commons</groupId>
|
||
<artifactId>commons-lang3</artifactId>
|
||
<version>3.5</version>
|
||
</dependency>
|
||
<dependency>
|
||
<groupId>org.slf4j</groupId>
|
||
<artifactId>slf4j-api</artifactId>
|
||
<version>1.7.24</version>
|
||
</dependency>
|
||
<dependency>
|
||
<groupId>com.thoughtworks.xstream</groupId>
|
||
<artifactId>xstream</artifactId>
|
||
<version>1.4.9</version>
|
||
</dependency>
|
||
<!-- 由于guava较新的21.0版本需要jdk8，故而此处采用较低版本 -->
|
||
<dependency>
|
||
<groupId>com.google.guava</groupId>
|
||
<artifactId>guava</artifactId>
|
||
<version>20.0</version>
|
||
</dependency>
|
||
<dependency>
|
||
<groupId>com.google.code.gson</groupId>
|
||
<artifactId>gson</artifactId>
|
||
<version>2.8.0</version>
|
||
</dependency>
|
||
|
||
<!-- 测试所用依赖 -->
|
||
<dependency>
|
||
<groupId>joda-time</groupId>
|
||
<artifactId>joda-time</artifactId>
|
||
<version>2.9.7</version>
|
||
<scope>test</scope>
|
||
</dependency>
|
||
<dependency>
|
||
<groupId>ch.qos.logback</groupId>
|
||
<artifactId>logback-classic</artifactId>
|
||
<version>1.1.11</version>
|
||
<scope>test</scope>
|
||
</dependency>
|
||
<dependency>
|
||
<groupId>com.google.inject</groupId>
|
||
<artifactId>guice</artifactId>
|
||
<version>3.0</version>
|
||
<scope>test</scope>
|
||
</dependency>
|
||
<dependency>
|
||
<groupId>org.testng</groupId>
|
||
<artifactId>testng</artifactId>
|
||
<version>6.10</version>
|
||
<scope>test</scope>
|
||
</dependency>
|
||
<dependency>
|
||
<groupId>org.mockito</groupId>
|
||
<artifactId>mockito-all</artifactId>
|
||
<version>1.9.5</version>
|
||
<scope>test</scope>
|
||
</dependency>
|
||
<dependency>
|
||
<groupId>org.eclipse.jetty</groupId>
|
||
<artifactId>jetty-server</artifactId>
|
||
<version>${jetty.version}</version>
|
||
<scope>test</scope>
|
||
</dependency>
|
||
<dependency>
|
||
<groupId>org.eclipse.jetty</groupId>
|
||
<artifactId>jetty-servlet</artifactId>
|
||
<version>${jetty.version}</version>
|
||
<scope>test</scope>
|
||
</dependency>
|
||
<dependency>
|
||
<groupId>org.assertj</groupId>
|
||
<artifactId>assertj-guava</artifactId>
|
||
<version>3.0.0</version>
|
||
<scope>test</scope>
|
||
</dependency>
|
||
|
||
<dependency>
|
||
<groupId>redis.clients</groupId>
|
||
<artifactId>jedis</artifactId>
|
||
<version>2.9.0</version>
|
||
<scope>provided</scope>
|
||
</dependency>
|
||
<dependency>
|
||
<groupId>org.projectlombok</groupId>
|
||
<artifactId>lombok</artifactId>
|
||
<version>1.16.18</version>
|
||
<scope>provided</scope>
|
||
</dependency>
|
||
</dependencies>
|
||
</dependencyManagement>
|
||
|
||
<distributionManagement>
|
||
<snapshotRepository>
|
||
<id>ossrh</id>
|
||
<url>https://oss.sonatype.org/content/repositories/snapshots</url>
|
||
</snapshotRepository>
|
||
<repository>
|
||
<id>ossrh</id>
|
||
<url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
|
||
</repository>
|
||
</distributionManagement>
|
||
|
||
<profiles>
|
||
<profile>
|
||
<id>doclint-java8-disable</id>
|
||
<activation>
|
||
<jdk>[1.8,)</jdk>
|
||
</activation>
|
||
<properties>
|
||
<javadoc.opts>-Xdoclint:none</javadoc.opts>
|
||
</properties>
|
||
</profile>
|
||
|
||
<profile>
|
||
<id>release</id>
|
||
<build>
|
||
<plugins>
|
||
<plugin>
|
||
<groupId>org.apache.maven.plugins</groupId>
|
||
<artifactId>maven-source-plugin</artifactId>
|
||
<version>2.2.1</version>
|
||
<executions>
|
||
<execution>
|
||
<id>attach-sources</id>
|
||
<goals>
|
||
<goal>jar-no-fork</goal>
|
||
</goals>
|
||
</execution>
|
||
</executions>
|
||
</plugin>
|
||
<plugin>
|
||
<groupId>org.apache.maven.plugins</groupId>
|
||
<artifactId>maven-javadoc-plugin</artifactId>
|
||
<version>2.9.1</version>
|
||
<executions>
|
||
<execution>
|
||
<id>attach-javadocs</id>
|
||
<goals>
|
||
<goal>jar</goal>
|
||
</goals>
|
||
</execution>
|
||
</executions>
|
||
<configuration>
|
||
<additionalparam>${javadoc.opts}</additionalparam>
|
||
<charset>UTF-8</charset>
|
||
<locale>zh_CN</locale>
|
||
</configuration>
|
||
</plugin>
|
||
<plugin>
|
||
<groupId>org.apache.maven.plugins</groupId>
|
||
<artifactId>maven-gpg-plugin</artifactId>
|
||
<version>1.6</version>
|
||
<executions>
|
||
<execution>
|
||
<id>sign-artifacts</id>
|
||
<phase>verify</phase>
|
||
<goals>
|
||
<goal>sign</goal>
|
||
</goals>
|
||
</execution>
|
||
</executions>
|
||
</plugin>
|
||
</plugins>
|
||
</build>
|
||
</profile>
|
||
</profiles>
|
||
|
||
<build>
|
||
<pluginManagement>
|
||
<plugins>
|
||
<plugin>
|
||
<groupId>org.apache.maven.plugins</groupId>
|
||
<artifactId>maven-surefire-plugin</artifactId>
|
||
<version>2.17</version>
|
||
<configuration>
|
||
<skip>true</skip>
|
||
</configuration>
|
||
</plugin>
|
||
</plugins>
|
||
</pluginManagement>
|
||
|
||
<plugins>
|
||
<plugin>
|
||
<groupId>org.sonatype.plugins</groupId>
|
||
<artifactId>nexus-staging-maven-plugin</artifactId>
|
||
<version>1.6.3</version>
|
||
<extensions>true</extensions>
|
||
<configuration>
|
||
<serverId>ossrh</serverId>
|
||
<nexusUrl>https://oss.sonatype.org/</nexusUrl>
|
||
<autoReleaseAfterClose>true</autoReleaseAfterClose>
|
||
</configuration>
|
||
</plugin>
|
||
<plugin>
|
||
<groupId>org.apache.maven.plugins</groupId>
|
||
<artifactId>maven-release-plugin</artifactId>
|
||
<version>2.5.1</version>
|
||
<configuration>
|
||
<autoVersionSubmodules>true</autoVersionSubmodules>
|
||
<useReleaseProfile>false</useReleaseProfile>
|
||
<releaseProfiles>release</releaseProfiles>
|
||
<goals>deploy</goals>
|
||
</configuration>
|
||
</plugin>
|
||
<plugin>
|
||
<groupId>org.apache.maven.plugins</groupId>
|
||
<artifactId>maven-checkstyle-plugin</artifactId>
|
||
<version>2.17</version>
|
||
<configuration>
|
||
<configLocation>quality-checks/google_checks.xml</configLocation>
|
||
<includeTestSourceDirectory>true</includeTestSourceDirectory>
|
||
<consoleOutput>true</consoleOutput>
|
||
<failsOnError>true</failsOnError>
|
||
</configuration>
|
||
<executions>
|
||
<execution>
|
||
<phase>verify</phase>
|
||
<goals>
|
||
<goal>check</goal>
|
||
</goals>
|
||
</execution>
|
||
</executions>
|
||
</plugin>
|
||
</plugins>
|
||
</build>
|
||
|
||
</project>
|