From 068ea831ec54cd8079abfe1954773c306ec5fb62 Mon Sep 17 00:00:00 2001
From: guoshengxiong <1923636941@qq.com>
Date: Mon, 25 Aug 2025 13:41:30 +0800
Subject: [PATCH] =?UTF-8?q?=E4=BE=9D=E8=B5=96=E5=8D=87=E7=BA=A7?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 pom.xml                                      | 8 ++------
 src/main/java/com/WisdomSiteApplication.java | 5 ++++-
 2 files changed, 6 insertions(+), 7 deletions(-)

diff --git a/pom.xml b/pom.xml
index 9ec5ce8b5..1dced3e2e 100644
--- a/pom.xml
+++ b/pom.xml
@@ -24,7 +24,8 @@
         <druid.version>1.2.18</druid.version>
         <jwt.version>0.9.1</jwt.version>
         <commons.version>2.6</commons.version>
-<!--        <tomcat.version>10.1.15</tomcat.version>-->
+        <tomcat.version>10.1.44</tomcat.version>
+        <netty.version>4.1.124.Final</netty.version>
     </properties>
 
     <repositories>
@@ -446,11 +447,6 @@
             <artifactId>hutool-core</artifactId>
             <version>5.8.36</version>
         </dependency>
-<!--        <dependency>-->
-<!--            <groupId>org.apache.tomcat</groupId>-->
-<!--            <artifactId>tomcat-juli</artifactId>-->
-<!--            <version>${tomcat.version}</version>-->
-<!--        </dependency>-->
         <dependency>
             <groupId>com.github.xiaoymin</groupId>
             <artifactId>knife4j-openapi3-jakarta-spring-boot-starter</artifactId>
diff --git a/src/main/java/com/WisdomSiteApplication.java b/src/main/java/com/WisdomSiteApplication.java
index e06d4321f..84d1cfcce 100644
--- a/src/main/java/com/WisdomSiteApplication.java
+++ b/src/main/java/com/WisdomSiteApplication.java
@@ -2,6 +2,7 @@ package com;
 
 
 import cn.xuyanwu.spring.file.storage.EnableFileStorage;
+import com.alibaba.fastjson.parser.ParserConfig;
 import com.zhgd.redis.lock.redisson.EnableDistributedLock;
 import org.apache.catalina.connector.Connector;
 import org.mybatis.spring.annotation.MapperScan;
@@ -42,9 +43,11 @@ public class WisdomSiteApplication extends SpringBootServletInitializer {
     public static boolean runSucess = false;
 
     public static void main(String[] args) {
+        // 完全禁用 autoType，确保 Fastjson 安全
+        ParserConfig.getGlobalInstance().setSafeMode(true);
+        com.alibaba.fastjson.parser.ParserConfig.getGlobalInstance().setSafeMode(true);
         SpringApplication.run(WisdomSiteApplication.class, args);
         WisdomSiteApplication.runSucess = true;
-        com.alibaba.fastjson.parser.ParserConfig.getGlobalInstance().setSafeMode(true);
     }
 
     @Bean