Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Enhancement/attribution template #241

Merged
merged 11 commits into from
Mar 22, 2024

Conversation

duph97
Copy link
Contributor

@duph97 duph97 commented Mar 18, 2024

This solves #240

duph97 and others added 11 commits March 10, 2024 16:36
commit a38bf81
Author: Oliver Hecker <[email protected]>
Date:   Fri Mar 15 12:15:30 2024 +0100

    Avoid path traversal threats (devonfw#239)

    * Introduce and make use of IOHelper.securePath() to further harden against path traversal threats.

    * Limit DirectUrlWebContentProvider to only handle http and https URLs.

    * Update release notes

    * Rename method from securePath to secureFilePath to better clarify scope/purpose

    * fixed typo in comment

    Co-authored-by: chrimih <[email protected]>

    ---------

    Co-authored-by: chrimih <[email protected]>

commit 35cf767
Author: Oliver Hecker <[email protected]>
Date:   Mon Mar 11 12:11:02 2024 +0100

    Set version to SNAPSHOT of next minor release (1.21.0-SNAPSHOT)

commit c7200dc
Author: Oliver Hecker <[email protected]>
Date:   Mon Mar 11 11:49:27 2024 +0100

    Version 1.20.0

commit fed2f9d
Author: Oliver Hecker <[email protected]>
Date:   Mon Mar 11 11:15:45 2024 +0100

    Implementation of YarnModernReader to support Yarn 2 and above (devonfw#238)

# Conflicts:
#	documentation/master-solicitor.asciidoc
…n duplicates (if e.g. data is read in by different reader types where only one fills the attribute, like gradle2/maven)
@ohecker ohecker merged commit 372ee37 into devonfw:master Mar 22, 2024
2 checks passed
@duph97 duph97 deleted the enhancement/Attribution_template branch March 26, 2024 09:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants