Use HTTPS instead of HTTP to resolve dependencies (sakaiproject#7876)

This fixes a security vulnerability in this project where the `pom.xml` files were configuring Maven to resolve dependencies over HTTP instead of HTTPS. Signed-off-by: Jonathan Leitschuh <[email protected]>
axxter99 · Feb 11, 2020 · 38512fe · 38512fe
1 parent 1cfbf72
commit 38512fe
Show file tree

Hide file tree

Showing 4 changed files with 8 additions and 8 deletions.
diff --git a/feedback/pom.xml b/feedback/pom.xml
@@ -29,7 +29,7 @@
 	<pluginRepositories>
 		<pluginRepository>
 			<id>mc-release</id>
-			<url>http://mc-repo.googlecode.com/svn/maven2/releases</url>
+			<url>https://mc-repo.googlecode.com/svn/maven2/releases</url>
 		</pluginRepository>
     </pluginRepositories>
 

diff --git a/kernel/kernel-tim/pom.xml b/kernel/kernel-tim/pom.xml
@@ -110,7 +110,7 @@
         <repository>
             <id>terracotta-releases</id>
             <!-- You might need to use http://repo.spring.io/libs-release-remote to build this -->
-            <url>http://www.terracotta.org/download/reflector/releases</url>
+            <url>https://www.terracotta.org/download/reflector/releases</url>
         </repository>
     </repositories>
     <pluginRepositories>
@@ -129,7 +129,7 @@
         <pluginRepository>
             <id>terracotta-repository</id>
             <!-- You might need to use http://repo.spring.io/libs-release-remote to build this -->
-            <url>http://www.terracotta.org/download/reflector/maven2</url>
+            <url>https://www.terracotta.org/download/reflector/maven2</url>
             <releases>
                 <enabled>true</enabled>
             </releases>

diff --git a/master/pom.xml b/master/pom.xml
@@ -279,7 +279,7 @@
       <id>sakai-maven</id>
       <name>Sakai Maven Repo</name>
       <layout>default</layout>
-      <url>http://source.sakaiproject.org/maven2</url>
+      <url>https://source.sakaiproject.org/maven2</url>
       <releases>
         <enabled>true</enabled>
         <checksumPolicy>ignore</checksumPolicy>
@@ -309,7 +309,7 @@
       <id>sakai-maven2-snapshots</id>
       <name>Sakai Maven Repo</name>
       <layout>default</layout>
-      <url>http://source.sakaiproject.org/maven2-snapshots</url>
+      <url>https://source.sakaiproject.org/maven2-snapshots</url>
       <releases>
         <enabled>false</enabled>
         <checksumPolicy>ignore</checksumPolicy>

diff --git a/pack/pom.xml b/pack/pom.xml
@@ -70,7 +70,7 @@
         </pluginRepository>
         <pluginRepository>
             <id>Sakai Plugin Repo</id>
-            <url>http://source.sakaiproject.org/maven2</url>
+            <url>https://source.sakaiproject.org/maven2</url>
             <releases>
                 <enabled>true</enabled>
             </releases>
@@ -85,7 +85,7 @@
             <id>sakai-maven2-snapshots</id>
             <name>Sakai Maven Repo Snapshots</name>
             <layout>default</layout>
-            <url>http://source.sakaiproject.org/maven2-snapshots</url>
+            <url>https://source.sakaiproject.org/maven2-snapshots</url>
             <releases>
                 <enabled>false</enabled>
             </releases>
@@ -97,7 +97,7 @@
             <id>sakai-maven2</id>
             <name>Sakai Maven Repository</name>
             <layout>default</layout>
-            <url>http://source.sakaiproject.org/maven2</url>
+            <url>https://source.sakaiproject.org/maven2</url>
             <releases>
                 <enabled>true</enabled>
             </releases>