Merge pull request #4500 in CORE/base-third from feature/x to release/11.0

* commit 'c5964c824c4f87410e4d21e637353c42e6283e56':
  KERNEL-9861 feat: 适配slf4j&&pom修复
  KERNEL-9861 feat: 适配slf4j&&pom修复
  KERNEL-9835	fix: Apache HttpClient 安全漏洞, 升级到4.5.13
  无jira任务 fix: pom报错修复
  无jira任务 fix: pom报错修复
  KERNEL-9685 fix: log4j 版本升级
  KERNEL-9861 fix: pom修复
  KERNEL-9862 fix: druid对接slf4j
  DEC-21348 fix: java security适配
  无jira任务 fix: druid log4j适配
  KERNEL-9685 refactor: log4j 版本升级
  KERNEL-9862 补上被误删的代码
  KERNEL-9862 druid log4j2的适配
  KERNEL-9836 update： alibaba druid 版本升级
  KERNEL-9700 update: netty-socket.io框架需要升级到最新的版本

base-third-project/base-third-step8/pom.xml

@@ -7,7 +7,7 @@
     <parent>
         <groupId>com.fr.third</groupId>
         <artifactId>base-third</artifactId>
-        <version>10.0-FEATURE-SNAPSHOT</version>
+        <version>${revision}</version>
     </parent>
 
     <artifactId>step8</artifactId>

fine-byte-buddy/src/main/java/com/fr/third/net/bytebuddy/dynamic/NexusAccessor.java

@@ -19,20 +19,19 @@ import com.fr.third.net.bytebuddy.build.HashCodeAndEqualsPlugin;
 import com.fr.third.net.bytebuddy.description.method.MethodDescription;
 import com.fr.third.net.bytebuddy.description.type.TypeDescription;
 import com.fr.third.net.bytebuddy.dynamic.loading.ClassInjector;
-import com.fr.third.net.bytebuddy.dynamic.loading.ClassLoadingStrategy;
 import com.fr.third.net.bytebuddy.implementation.Implementation;
 import com.fr.third.net.bytebuddy.implementation.LoadedTypeInitializer;
 import com.fr.third.net.bytebuddy.implementation.bytecode.ByteCodeAppender;
 import com.fr.third.net.bytebuddy.implementation.bytecode.Removal;
 import com.fr.third.net.bytebuddy.implementation.bytecode.StackManipulation;
-import com.fr.third.net.bytebuddy.implementation.bytecode.member.MethodInvocation;
-import com.fr.third.research.annotations.SuppressFBWarnings;
 import com.fr.third.net.bytebuddy.implementation.bytecode.collection.ArrayFactory;
 import com.fr.third.net.bytebuddy.implementation.bytecode.constant.ClassConstant;
 import com.fr.third.net.bytebuddy.implementation.bytecode.constant.IntegerConstant;
 import com.fr.third.net.bytebuddy.implementation.bytecode.constant.NullConstant;
 import com.fr.third.net.bytebuddy.implementation.bytecode.constant.TextConstant;
+import com.fr.third.net.bytebuddy.implementation.bytecode.member.MethodInvocation;
 import com.fr.third.org.objectweb.asm.MethodVisitor;
+import com.fr.third.research.annotations.SuppressFBWarnings;
 
 import java.lang.ref.Reference;
 import java.lang.ref.ReferenceQueue;
@@ -223,7 +222,11 @@ public class NexusAccessor {
                     return new Unavailable("Nexus injection was explicitly disabled");
                 } else {
                     try {
-                        Class<?> nexusType = new ClassInjector.UsingReflection(ClassLoader.getSystemClassLoader(), ClassLoadingStrategy.NO_PROTECTION_DOMAIN)
+                        /*
+                         * 实例化UsingReflection时要指定非null的ProtectionDomain，否则开启-security后经由这里调用具体方法时会校验权限失败
+                         * 这里指定为NexusAccessor的ProtectionDomain，即fine-third jar
+                         */
+                        Class<?> nexusType = new ClassInjector.UsingReflection(ClassLoader.getSystemClassLoader(), getClass().getProtectionDomain())
                                 .inject(Collections.singletonMap(TypeDescription.ForLoadedType.of(Nexus.class), ClassFileLocator.ForClassLoader.read(Nexus.class)))
                                 .get(TypeDescription.ForLoadedType.of(Nexus.class));
                         return new Dispatcher.Available(nexusType.getMethod("register", String.class, ClassLoader.class, ReferenceQueue.class, int.class, Object.class),