fix:20260904代码扫描漏洞问题修复

pom.xml

@@ -7,6 +7,7 @@
     <properties>
         <nutzboot.version>2.6.0-SNAPSHOT</nutzboot.version>
         <nutz.version>1.r.70-SNAPSHOT</nutz.version>
+        <jetty.cug-patch.version>9.4.57.v20241219-cug-patch1</jetty.cug-patch.version>
         <mysql-connector-java.version>8.0.28</mysql-connector-java.version>
         <jaxb-api.version>2.3.1</jaxb-api.version>
         <slf4j.version>2.0.8</slf4j.version>
@@ -424,6 +425,32 @@
     </dependencies>
     <dependencyManagement>
         <dependencies>
+            <!-- 使用项目内的 Jetty 安全补丁，覆盖 NutzBoot 导入的受影响模块版本。 -->
+            <dependency>
+                <groupId>org.eclipse.jetty</groupId>
+                <artifactId>jetty-http</artifactId>
+                <version>${jetty.cug-patch.version}</version>
+            </dependency>
+            <dependency>
+                <groupId>org.eclipse.jetty</groupId>
+                <artifactId>jetty-server</artifactId>
+                <version>${jetty.cug-patch.version}</version>
+            </dependency>
+            <dependency>
+                <groupId>org.eclipse.jetty</groupId>
+                <artifactId>jetty-security</artifactId>
+                <version>${jetty.cug-patch.version}</version>
+            </dependency>
+            <dependency>
+                <groupId>org.eclipse.jetty</groupId>
+                <artifactId>jetty-client</artifactId>
+                <version>${jetty.cug-patch.version}</version>
+            </dependency>
+            <dependency>
+                <groupId>org.eclipse.jetty</groupId>
+                <artifactId>jetty-jaspi</artifactId>
+                <version>${jetty.cug-patch.version}</version>
+            </dependency>
             <dependency>
                 <groupId>org.nutz</groupId>
                 <artifactId>nutzboot-parent</artifactId>
@@ -516,6 +543,17 @@
         </resources>
     </build>
     <repositories>
+        <repository>
+            <id>cug-jetty-patch</id>
+            <url>file:///${project.basedir}/tools/jetty-security-patch/repository</url>
+            <releases>
+                <enabled>true</enabled>
+                <checksumPolicy>fail</checksumPolicy>
+            </releases>
+            <snapshots>
+                <enabled>false</enabled>
+            </snapshots>
+        </repository>
         <repository>
             <id>nutz</id>
             <url>https://jfrog.nutz.cn/artifactory/libs-release</url>