Skip to content

Commit 38d0819

Browse files
JLLeitschuhsenivam
andauthoredFeb 17, 2020
Use HTTPS to resolve dependencies in Maven Build (eclipse-ee4j#4391)
* Use HTTPS instead of HTTP to resolve dependencies This fixes a security vulnerability in this project where the `pom.xml` files were configuring Maven to resolve dependencies over HTTP instead of HTTPS. Signed-off-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com> * Update pom.xml Co-authored-by: Maxim Nesen <24524084+senivam@users.noreply.github.com>
1 parent 706c01c commit 38d0819

File tree

2 files changed

+3
-3
lines changed

2 files changed

+3
-3
lines changed
 

‎media/moxy/pom.xml

+2-2
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
<?xml version="1.0" encoding="UTF-8"?>
22
<!--
33
4-
Copyright (c) 2012, 2019 Oracle and/or its affiliates. All rights reserved.
4+
Copyright (c) 2012, 2020 Oracle and/or its affiliates. All rights reserved.
55
66
This program and the accompanying materials are made available under the
77
terms of the Eclipse Public License v. 2.0, which is available at
@@ -130,7 +130,7 @@
130130
<repository>
131131
<id>eclipselink.repository</id>
132132
<name>Eclipse Maven Repository</name>
133-
<url>http://download.eclipse.org/rt/eclipselink/maven.repo</url>
133+
<url>https://download.eclipse.org/rt/eclipselink/maven.repo</url>
134134
<layout>default</layout>
135135
</repository>
136136
</repositories>

‎pom.xml

+1-1
Original file line numberDiff line numberDiff line change
@@ -1112,7 +1112,7 @@
11121112
<repository>
11131113
<id>eclipselink.repository</id>
11141114
<name>Eclipse Maven Repository</name>
1115-
<url>http://www.eclipse.org/downloads/download.php?r=1&amp;nf=1&amp;file=/rt/eclipselink/maven.repo</url>
1115+
<url>https://www.eclipse.org/downloads/download.php?r=1&amp;nf=1&amp;file=/rt/eclipselink/maven.repo</url>
11161116
<layout>default</layout>
11171117
</repository>
11181118
</repositories>

0 commit comments

Comments
 (0)