You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@maven.apache.org by "Gabor Kecskemeti (Jira)" <ji...@apache.org> on 2022/08/25 12:48:00 UTC

[jira] [Created] (MASSEMBLY-971) Symbolic links created by the plugin are absolute (i.e., the build environment is leaking through them)

Gabor Kecskemeti created MASSEMBLY-971:
------------------------------------------

             Summary: Symbolic links created by the plugin are absolute (i.e., the build environment is leaking through them)
                 Key: MASSEMBLY-971
                 URL: https://issues.apache.org/jira/browse/MASSEMBLY-971
             Project: Maven Assembly Plugin
          Issue Type: Bug
    Affects Versions: 3.4.2
         Environment: ubuntu 22.04, maven 3.8.6, assembly plugin 3.4.2
            Reporter: Gabor Kecskemeti


To recreate this:

create a folder, then create a file in it. create a symlink to the file from the parent of the previously created folder (should be a relative link e.g., run ln -s folder/file from parent).

create an assembly descriptor that creates a tar.gz from the parent of the above create folder and run it. 1) The produced tgz will contain a symlink which is broken. 2) the produced symlink leaks information about the build environment as instead of the original folder/file symlink we end up with the complete path of the assembled project + parent/folder/file.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)