velocity剔除commons-collections版本，防止3.2.1版本的反序列化漏洞

RuoYi

2021-03-14 bf4e1ec13a05268b772a6d5e24204a77c18eaacc

 src/main/java/com/ruoyi/common/utils/html/EscapeUtil.java

@@ -144,7 +144,10 @@


    public static void main(String[] args)

    {

        String html = "alert('11111');";

        String html = "<script>alert(1);</script>";

        // String html = "<scr<script>ipt>alert(\"XSS\")</scr<script>ipt>";

        // String html = "<123";

        // String html = "123>";

        System.out.println(EscapeUtil.clean(html));

        System.out.println(EscapeUtil.escape(html));

        System.out.println(EscapeUtil.unescape(html));