Skip to content

Commit

Permalink
Use HTTPS instead of HTTP to resolve dependencies (#675)
Browse files Browse the repository at this point in the history
This fixes a security vulnerability in this project where the `pom.xml`
files were configuring Maven to resolve dependencies over HTTP instead of
HTTPS.

Signed-off-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>
  • Loading branch information
JLLeitschuh authored Feb 25, 2020
1 parent 214d982 commit 5df8600
Showing 1 changed file with 4 additions and 4 deletions.
8 changes: 4 additions & 4 deletions dubbo-spring-boot-parent/pom.xml
Original file line number Diff line number Diff line change
Expand Up @@ -125,15 +125,15 @@
<repository>
<id>spring-milestone</id>
<name>Spring Milestone</name>
<url>http://repo.spring.io/milestone</url>
<url>https://repo.spring.io/milestone</url>
<snapshots>
<enabled>false</enabled>
</snapshots>
</repository>
<repository>
<id>spring-snapshot</id>
<name>Spring Snapshot</name>
<url>http://repo.spring.io/snapshot</url>
<url>https://repo.spring.io/snapshot</url>
<snapshots>
<enabled>true</enabled>
</snapshots>
Expand All @@ -159,15 +159,15 @@
<pluginRepository>
<id>spring-milestone</id>
<name>Spring Milestone</name>
<url>http://repo.spring.io/milestone</url>
<url>https://repo.spring.io/milestone</url>
<snapshots>
<enabled>false</enabled>
</snapshots>
</pluginRepository>
<pluginRepository>
<id>spring-snapshot</id>
<name>Spring Snapshot</name>
<url>http://repo.spring.io/snapshot</url>
<url>https://repo.spring.io/snapshot</url>
<snapshots>
<enabled>true</enabled>
</snapshots>
Expand Down

0 comments on commit 5df8600

Please sign in to comment.