Skip to content

Commit

Permalink
Use HTTPS instead of HTTP to resolve dependencies
Browse files Browse the repository at this point in the history
This fixes a security vulnerability in this project where the `pom.xml`
files were configuring Maven to resolve dependencies over HTTP instead of
HTTPS.

Signed-off-by: Jonathan Leitschuh <[email protected]>
  • Loading branch information
JLLeitschuh committed Feb 11, 2020
1 parent cef527b commit 5b97286
Showing 1 changed file with 2 additions and 2 deletions.
4 changes: 2 additions & 2 deletions pom.xml
Original file line number Diff line number Diff line change
Expand Up @@ -297,13 +297,13 @@
<repository>
<id>maven2-repository.dcache.org</id>
<name>dCache.ORG Repository for Maven</name>
<url>http://download.dcache.org/nexus/content/groups/public/</url>
<url>https://download.dcache.org/nexus/content/groups/public/</url>
<layout>default</layout>
</repository>
<repository>
<id>dcache-snapshots</id>
<name>dCache.ORG snapshots repository</name>
<url>http://download.dcache.org/nexus/content/repositories/snapshots</url>
<url>https://download.dcache.org/nexus/content/repositories/snapshots</url>
<layout>default</layout>
</repository>
</repositories>
Expand Down

0 comments on commit 5b97286

Please sign in to comment.