You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@maven.apache.org by "Gabor Kecskemeti (Jira)" <ji...@apache.org> on 2022/08/25 12:48:00 UTC
[jira] [Created] (MASSEMBLY-971) Symbolic links created by the plugin are absolute (i.e., the build environment is leaking through them)
Gabor Kecskemeti created MASSEMBLY-971:
------------------------------------------
Summary: Symbolic links created by the plugin are absolute (i.e., the build environment is leaking through them)
Key: MASSEMBLY-971
URL: https://issues.apache.org/jira/browse/MASSEMBLY-971
Project: Maven Assembly Plugin
Issue Type: Bug
Affects Versions: 3.4.2
Environment: ubuntu 22.04, maven 3.8.6, assembly plugin 3.4.2
Reporter: Gabor Kecskemeti
To recreate this:
create a folder, then create a file in it. create a symlink to the file from the parent of the previously created folder (should be a relative link e.g., run ln -s folder/file from parent).
create an assembly descriptor that creates a tar.gz from the parent of the above create folder and run it. 1) The produced tgz will contain a symlink which is broken. 2) the produced symlink leaks information about the build environment as instead of the original folder/file symlink we end up with the complete path of the assembled project + parent/folder/file.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)