[jira] Updated: (INFRA-3151) add servlet filter to nexus to block maven 2.2.0 deploys

["David Blevins (JIRA)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/INFRA-3151?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

David Blevins updated INFRA-3151:
---------------------------------

    Attachment: RejectFilter.java
                web.xml

Just merge the web.xml content into the web.xml of nexus and include this class in the webapp

Adjust the <url-pattern> as needed.

> add servlet filter to nexus to block maven 2.2.0 deploys
> --------------------------------------------------------
>
>                 Key: INFRA-3151
>                 URL: https://issues.apache.org/jira/browse/INFRA-3151
>             Project: Infrastructure
>          Issue Type: Improvement
>      Security Level: public(Regular issues) 
>          Components: Nexus
>            Reporter: Brian Fox
>            Assignee: David Blevins
>         Attachments: RejectFilter.java, web.xml
>
>
> Maven 2.2.0 is known to produce bad checksums and doubles the data upload potentially causing timeouts.
> Here's an example user agent we want to block: Apache-Maven/2.2 (Java 1.6.0_16; Linux 2.6.26-2-amd64) maven-artifact/2.2.0" "-"
> This should be blocked from /content for PUTs only.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.