github
/
jeecg
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Use HTTPS instead of HTTP to resolve dependencies 

This fixes a security vulnerability in this project where the `pom.xml`
files were configuring Maven to resolve dependencies over HTTP instead of
HTTPS.

Signed-off-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>
pull/53/head
Jonathan Leitschuh 2020-02-11 11:38:51 -05:00
parent 90ddf8e854
commit 6f948bd283
1 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
pom.xml
View File

@ -111,7 +111,7 @@
<repository> <repository>
<id>aliyun</id> <id>aliyun</id>
<name>aliyun Repository</name> <name>aliyun Repository</name>
<url>http://maven.aliyun.com/nexus/content/groups/public</url> <url>https://maven.aliyun.com/nexus/content/groups/public</url>
<snapshots> <snapshots>
<enabled>false</enabled> <enabled>false</enabled>
</snapshots> </snapshots>
@ -119,7 +119,7 @@
<repository> <repository>
<id>jeecg</id> <id>jeecg</id>
<name>jeecg Repository</name> <name>jeecg Repository</name>
<url>http://maven.jeewx.com/nexus/content/repositories/jeecg</url> <url>https://maven.jeewx.com/nexus/content/repositories/jeecg</url>
<snapshots> <snapshots>
<enabled>false</enabled> <enabled>false</enabled>
</snapshots> </snapshots>
@ -127,7 +127,7 @@
<repository> <repository>
<id>jeecg-snapshots</id> <id>jeecg-snapshots</id>
<name>jeecg-snapshots Repository</name> <name>jeecg-snapshots Repository</name>
<url>http://maven.jeewx.com/nexus/content/repositories/snapshots</url> <url>https://maven.jeewx.com/nexus/content/repositories/snapshots</url>
<snapshots> <snapshots>
<enabled>true</enabled> <enabled>true</enabled>
</snapshots> </snapshots>