Skip to content

Commit

Permalink
Use HTTPS instead of HTTP to resolve dependencies (#494)
Browse files Browse the repository at this point in the history
This fixes a security vulnerability in this project where the `pom.xml`
files were configuring Maven to resolve dependencies over HTTP instead of
HTTPS.

Signed-off-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>
  • Loading branch information
JLLeitschuh authored Feb 25, 2020
1 parent 611f68c commit 37f9251
Show file tree
Hide file tree
Showing 3 changed files with 4 additions and 4 deletions.
4 changes: 2 additions & 2 deletions pom.xml
Original file line number Diff line number Diff line change
Expand Up @@ -205,7 +205,7 @@
<id>central-repo</id>
<name>Maven Repository</name>
<!-- HTTPS is unavailable for Maven Central -->
<url>http://repo.maven.apache.org/maven2</url>
<url>https://repo.maven.apache.org/maven2</url>
<releases>
<enabled>true</enabled>
</releases>
Expand Down Expand Up @@ -238,7 +238,7 @@
<repository>
<id>clojars-repo</id>
<name>Clojars Repository</name>
<url>http://clojars.org/repo</url>
<url>https://clojars.org/repo</url>
<releases>
<enabled>true</enabled>
</releases>
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -40,7 +40,7 @@
<repository>
<id>typesafe</id>
<name>typesafe</name>
<url>http://repo.typesafe.com/typesafe/repo</url>
<url>https://repo.typesafe.com/typesafe/repo</url>
</repository>
</repositories>

Expand Down
2 changes: 1 addition & 1 deletion streams-contrib/streams-provider-youtube/pom.xml
Original file line number Diff line number Diff line change
Expand Up @@ -38,7 +38,7 @@
<repositories>
<repository>
<id>google-api-services</id>
<url>http://google-api-client-libraries.appspot.com/mavenrepo</url>
<url>https://google-api-client-libraries.appspot.com/mavenrepo</url>
</repository>
</repositories>

Expand Down

0 comments on commit 37f9251

Please sign in to comment.