From cccebc174e042d8d57b7536496b5779a004179fe Mon Sep 17 00:00:00 2001 From: Jonathan Leitschuh Date: Tue, 11 Feb 2020 11:34:21 -0500 Subject: [PATCH] Use HTTPS instead of HTTP to resolve dependencies This fixes a security vulnerability in this project where the `pom.xml` files were configuring Maven to resolve dependencies over HTTP instead of HTTPS. Signed-off-by: Jonathan Leitschuh --- .../org.jaggeryjs.jaggery.tomcat.listener/pom.xml | 2 +- pom.xml | 12 ++++++------ 2 files changed, 7 insertions(+), 7 deletions(-) diff --git a/components/app-listeners/org.jaggeryjs.jaggery.tomcat.listener/pom.xml b/components/app-listeners/org.jaggeryjs.jaggery.tomcat.listener/pom.xml index cdc35d4b..4e522562 100644 --- a/components/app-listeners/org.jaggeryjs.jaggery.tomcat.listener/pom.xml +++ b/components/app-listeners/org.jaggeryjs.jaggery.tomcat.listener/pom.xml @@ -14,7 +14,7 @@ wso2-nexus WSO2 internal Repository - http://maven.wso2.org/nexus/content/groups/wso2-public/ + https://maven.wso2.org/nexus/content/groups/wso2-public/ diff --git a/pom.xml b/pom.xml index 645a17f6..a5caa6e6 100644 --- a/pom.xml +++ b/pom.xml @@ -262,7 +262,7 @@ wso2-nexus WSO2 Internal Repository - http://maven.wso2.org/nexus/content/groups/wso2-public/ + https://maven.wso2.org/nexus/content/groups/wso2-public/ true daily @@ -272,7 +272,7 @@ wso2.releases WSO2 Internal Repository - http://maven.wso2.org/nexus/content/repositories/releases/ + https://maven.wso2.org/nexus/content/repositories/releases/ true daily @@ -282,7 +282,7 @@ wso2.snapshots WSO2 Snapshot Repository - http://maven.wso2.org/nexus/content/repositories/snapshots/ + https://maven.wso2.org/nexus/content/repositories/snapshots/ true daily @@ -296,7 +296,7 @@ wso2.releases WSO2 Internal Repository - http://maven.wso2.org/nexus/content/repositories/releases/ + https://maven.wso2.org/nexus/content/repositories/releases/ true daily @@ -306,7 +306,7 @@ wso2.snapshots WSO2 Snapshot Repository - http://maven.wso2.org/nexus/content/repositories/snapshots/ + https://maven.wso2.org/nexus/content/repositories/snapshots/ true daily @@ -318,7 +318,7 @@ wso2-nexus WSO2 Internal Repository - http://maven.wso2.org/nexus/content/groups/wso2-public/ + https://maven.wso2.org/nexus/content/groups/wso2-public/ true daily