Skip to content

Commit

Permalink
Use HTTPS to resolve dependencies in Maven Build (eclipse-ee4j#4391)
Browse files Browse the repository at this point in the history
* Use HTTPS instead of HTTP to resolve dependencies

This fixes a security vulnerability in this project where the `pom.xml`
files were configuring Maven to resolve dependencies over HTTP instead of
HTTPS.

Signed-off-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>

* Update pom.xml

Co-authored-by: Maxim Nesen <24524084+senivam@users.noreply.github.com>
  • Loading branch information
JLLeitschuh and senivam authored Feb 17, 2020
1 parent 706c01c commit 38d0819
Show file tree
Hide file tree
Showing 2 changed files with 3 additions and 3 deletions.
4 changes: 2 additions & 2 deletions media/moxy/pom.xml
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
<?xml version="1.0" encoding="UTF-8"?>
<!--
Copyright (c) 2012, 2019 Oracle and/or its affiliates. All rights reserved.
Copyright (c) 2012, 2020 Oracle and/or its affiliates. All rights reserved.
This program and the accompanying materials are made available under the
terms of the Eclipse Public License v. 2.0, which is available at
Expand Down Expand Up @@ -130,7 +130,7 @@
<repository>
<id>eclipselink.repository</id>
<name>Eclipse Maven Repository</name>
<url>http://download.eclipse.org/rt/eclipselink/maven.repo</url>
<url>https://download.eclipse.org/rt/eclipselink/maven.repo</url>
<layout>default</layout>
</repository>
</repositories>
Expand Down
2 changes: 1 addition & 1 deletion pom.xml
Original file line number Diff line number Diff line change
Expand Up @@ -1112,7 +1112,7 @@
<repository>
<id>eclipselink.repository</id>
<name>Eclipse Maven Repository</name>
<url>http://www.eclipse.org/downloads/download.php?r=1&amp;nf=1&amp;file=/rt/eclipselink/maven.repo</url>
<url>https://www.eclipse.org/downloads/download.php?r=1&amp;nf=1&amp;file=/rt/eclipselink/maven.repo</url>
<layout>default</layout>
</repository>
</repositories>
Expand Down

0 comments on commit 38d0819

Please sign in to comment.