You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@myfaces.apache.org by de...@apache.org on 2020/02/11 05:58:52 UTC
[myfaces-tobago] branch master updated: Use HTTPS instead of HTTP
to resolve dependencies
This is an automated email from the ASF dual-hosted git repository.
deki pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/myfaces-tobago.git
The following commit(s) were added to refs/heads/master by this push:
new ef32235 Use HTTPS instead of HTTP to resolve dependencies
new cd65072 Merge pull request #26 from JLLeitschuh/fix/JLL/use_https_to_resolve_dependencies
ef32235 is described below
commit ef3223533546b3fc2faeace24bd26aa9bb03f9ce
Author: Jonathan Leitschuh <Jo...@gmail.com>
AuthorDate: Mon Feb 10 19:05:31 2020 -0500
Use HTTPS instead of HTTP to resolve dependencies
This fixes a security vulnerability in this project where the `pom.xml`
files were configuring Maven to resolve dependencies over HTTP instead of
HTTPS.
Signed-off-by: Jonathan Leitschuh <Jo...@gmail.com>
---
tobago-example/pom.xml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/tobago-example/pom.xml b/tobago-example/pom.xml
index fdf0097..9db7c90 100644
--- a/tobago-example/pom.xml
+++ b/tobago-example/pom.xml
@@ -443,7 +443,7 @@
<!-- For IBM Websphere Liberty Profile (WLP) -->
<id>Liberty</id>
<name>Liberty Repository</name>
- <url>http://public.dhe.ibm.com/ibmdl/export/pub/software/websphere/wasdev/maven/repository/</url>
+ <url>https://public.dhe.ibm.com/ibmdl/export/pub/software/websphere/wasdev/maven/repository/</url>
<layout>default</layout>
<snapshots>
<enabled>false</enabled>