Use HTTPS instead of HTTP to resolve dependencies
This fixes a security vulnerability in this project where the `pom.xml` files were configuring Maven to resolve dependencies over HTTP instead of HTTPS. Signed-off-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>
This commit is contained in:
parent
d518e9e5a4
commit
e8694537df
6
pom.xml
6
pom.xml
@ -127,7 +127,7 @@
|
|||||||
<repository>
|
<repository>
|
||||||
<id>osgeo</id>
|
<id>osgeo</id>
|
||||||
<name>Open Source Geospatial Foundation Repository</name>
|
<name>Open Source Geospatial Foundation Repository</name>
|
||||||
<url>http://download.osgeo.org/webdav/geotools/</url>
|
<url>https://download.osgeo.org/webdav/geotools/</url>
|
||||||
<snapshots>
|
<snapshots>
|
||||||
<enabled>false</enabled>
|
<enabled>false</enabled>
|
||||||
</snapshots>
|
</snapshots>
|
||||||
@ -136,7 +136,7 @@
|
|||||||
<repository>
|
<repository>
|
||||||
<id>maven-restlet</id>
|
<id>maven-restlet</id>
|
||||||
<name>Restlet Maven Repository</name>
|
<name>Restlet Maven Repository</name>
|
||||||
<url>http://maven.restlet.org</url>
|
<url>https://maven.restlet.org</url>
|
||||||
<snapshots>
|
<snapshots>
|
||||||
<enabled>false</enabled>
|
<enabled>false</enabled>
|
||||||
</snapshots>
|
</snapshots>
|
||||||
@ -145,7 +145,7 @@
|
|||||||
<repository>
|
<repository>
|
||||||
<id>geosolutions</id>
|
<id>geosolutions</id>
|
||||||
<name>geosolutions repository</name>
|
<name>geosolutions repository</name>
|
||||||
<url>http://maven.geo-solutions.it/</url>
|
<url>https://maven.geo-solutions.it/</url>
|
||||||
<snapshots>
|
<snapshots>
|
||||||
<enabled>true</enabled>
|
<enabled>true</enabled>
|
||||||
</snapshots>
|
</snapshots>
|
||||||
|
|||||||
Loading…
Reference in New Issue
Block a user