fix:20260904代码扫描漏洞问题修复

dependency-reduced-pom.xml

@@ -78,6 +78,16 @@
     </plugins>
   </build>
   <repositories>
+    <repository>
+      <releases>
+        <checksumPolicy>fail</checksumPolicy>
+      </releases>
+      <snapshots>
+        <enabled>false</enabled>
+      </snapshots>
+      <id>cug-jetty-patch</id>
+      <url>file:///${project.basedir}/tools/jetty-security-patch/repository</url>
+    </repository>
     <repository>
       <id>nutz</id>
       <url>https://jfrog.nutz.cn/artifactory/libs-release</url>
@@ -133,6 +143,31 @@
   </dependencies>
   <dependencyManagement>
     <dependencies>
+      <dependency>
+        <groupId>org.eclipse.jetty</groupId>
+        <artifactId>jetty-http</artifactId>
+        <version>${jetty.cug-patch.version}</version>
+      </dependency>
+      <dependency>
+        <groupId>org.eclipse.jetty</groupId>
+        <artifactId>jetty-server</artifactId>
+        <version>${jetty.cug-patch.version}</version>
+      </dependency>
+      <dependency>
+        <groupId>org.eclipse.jetty</groupId>
+        <artifactId>jetty-security</artifactId>
+        <version>${jetty.cug-patch.version}</version>
+      </dependency>
+      <dependency>
+        <groupId>org.eclipse.jetty</groupId>
+        <artifactId>jetty-client</artifactId>
+        <version>${jetty.cug-patch.version}</version>
+      </dependency>
+      <dependency>
+        <groupId>org.eclipse.jetty</groupId>
+        <artifactId>jetty-jaspi</artifactId>
+        <version>${jetty.cug-patch.version}</version>
+      </dependency>
       <dependency>
         <groupId>org.nutz</groupId>
         <artifactId>nutzboot-parent</artifactId>
@@ -162,6 +197,7 @@
     <commons-lang3.version>3.8.1</commons-lang3.version>
     <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
     <pinyin4j.veision>2.5.1</pinyin4j.veision>
+    <jetty.cug-patch.version>9.4.57.v20241219-cug-patch1</jetty.cug-patch.version>
     <nutzboot.version>2.6.0-SNAPSHOT</nutzboot.version>
     <logback.version>1.5.8</logback.version>
     <nutz.version>1.r.70-SNAPSHOT</nutz.version>