From 860f8752d9fa16f28674396dc6aefdbdc67eab60 Mon Sep 17 00:00:00 2001 From: Jonathan Leitschuh Date: Tue, 11 Feb 2020 09:04:15 -0500 Subject: [PATCH] Use HTTPS instead of HTTP to resolve dependencies This fixes a security vulnerability in this project where the `pom.xml` files were configuring Maven to resolve dependencies over HTTP instead of HTTPS. Signed-off-by: Jonathan Leitschuh --- org.nodeclipse.site.test/pom.xml | 2 +- org.nodeclipse.site/pom.xml | 70 ++++++++++++++++---------------- pom.xml | 2 +- 3 files changed, 37 insertions(+), 37 deletions(-) diff --git a/org.nodeclipse.site.test/pom.xml b/org.nodeclipse.site.test/pom.xml index 9e2ac1d0..1e2dda3a 100644 --- a/org.nodeclipse.site.test/pom.xml +++ b/org.nodeclipse.site.test/pom.xml @@ -20,7 +20,7 @@ eexplorer p2 - http://culmat.github.io/eExplorer/updatesite/ + https://culmat.github.io/eExplorer/updatesite/ diff --git a/org.nodeclipse.site/pom.xml b/org.nodeclipse.site/pom.xml index 944c38d9..00b13749 100644 --- a/org.nodeclipse.site/pom.xml +++ b/org.nodeclipse.site/pom.xml @@ -24,7 +24,7 @@ jshint-eclipse p2 - http://github.eclipsesource.com/jshint-eclipse/updates/ + https://github.eclipsesource.com/jshint-eclipse/updates/ @@ -32,14 +32,14 @@ org.dadacoalition.yedit p2 - http://dadacoalition.org/yedit + https://dadacoalition.org/yedit git-addon p2 - http://www.nodeclipse.org/git/addon/ + https://www.nodeclipse.org/git/addon/ @@ -48,18 +48,18 @@ plugin-list p2 - http://www.nodeclipse.org/updates/pluginslist/ + https://www.nodeclipse.org/updates/pluginslist/ --> winterwell.markdown p2 - http://www.nodeclipse.org/updates/markdown/ + https://www.nodeclipse.org/updates/markdown/ gfm.viewer p2 - http://dl.bintray.com/satyagraha/generic/1.9.3/ + https://dl.bintray.com/satyagraha/generic/1.9.3/ net.jumperz.app.MMonjaDB p2 - http://www.jumperz.net/update/ + https://www.jumperz.net/update/ shelled @@ -117,47 +117,47 @@ less p2 - http://www.normalesup.org/~simonet/soft/ow/update/ + https://www.normalesup.org/~simonet/soft/ow/update/ --> ansy-console p2 - http://www.mihai-nita.net/eclipse + https://www.mihai-nita.net/eclipse grep-console p2 - http://eclipse.schedenig.name + https://eclipse.schedenig.name editbox p2 - http://nodeclipse.github.io/updates/editbox-0.70.0/ + https://nodeclipse.github.io/updates/editbox-0.70.0/ io.emmet.eclipse p2 - http://emmet.io/eclipse/updates/ + https://emmet.io/eclipse/updates/ zipeditor p2 - http://nodeclipse.github.io/updates/zipeditor/ + https://nodeclipse.github.io/updates/zipeditor/ @@ -166,7 +166,7 @@ jdt.spelling.feature p2 - http://jdt.spelling.s3-website-us-east-1.amazonaws.com + https://jdt.spelling.s3-website-us-east-1.amazonaws.com @@ -174,29 +174,29 @@ it.unibz.instasearch.feature.indigo p2 - http://dl.bintray.com/ajermakovics/InstaSearch/ + https://dl.bintray.com/ajermakovics/InstaSearch/ com.xored.glance p2 - http://eclipse-glance.googlecode.com/svn/site/ + https://eclipse-glance.googlecode.com/svn/site/ com.github.eclipsecolortheme.feature p2 - http://eclipse-color-theme.github.com/update + https://eclipse-color-theme.github.com/update net.jeeeyul.eclipse.themes.updatesite p2 - http://eclipse.jeeeyul.net/update/ + https://eclipse.jeeeyul.net/update/ moonrise.com.github.eclipseuitheme.themes.feature @@ -209,7 +209,7 @@ coffeescript-eclipse p2 - http://dl.bintray.com/nodeclipse/CoffeeScriptEditor/0.4.0-201403250304/ + https://dl.bintray.com/nodeclipse/CoffeeScriptEditor/0.4.0-201403250304/ @@ -217,28 +217,28 @@ EclipseRunner p2 - http://eclipserunnerplugin.googlecode.com/svn/trunk/EclipseRunnerSite + https://eclipserunnerplugin.googlecode.com/svn/trunk/EclipseRunnerSite practicallymacro p2 - http://puremvcnotificationviewer.googlecode.com/svn/trunk/PracticallyMacroGoogleUpdateSite + https://puremvcnotificationviewer.googlecode.com/svn/trunk/PracticallyMacroGoogleUpdateSite SelectionExplorer p2 - http://sandipchitaleseclipseplugins.googlecode.com/svn/trunk/SelectionExplorerUpdateSite + https://sandipchitaleseclipseplugins.googlecode.com/svn/trunk/SelectionExplorerUpdateSite OpenClosedProjectsFeature p2 - http://sandipchitaleseclipseplugins.googlecode.com/svn/trunk/OpenClosedProjectsFeatureUpdateSite/ + https://sandipchitaleseclipseplugins.googlecode.com/svn/trunk/OpenClosedProjectsFeatureUpdateSite/ @@ -247,7 +247,7 @@ fail-back p2 - http://dl.bintray.com/nodeclipse/nodeclipse/0.15/ + https://dl.bintray.com/nodeclipse/nodeclipse/0.15/ @@ -256,7 +256,7 @@ winterwell.markdown p2 - http://winterwell.com/software/updatesite/ + https://winterwell.com/software/updatesite/ --> @@ -264,12 +264,12 @@ Closure-by-Vincent.Simonet.p2f p2 - http://www.normalesup.org/~simonet/soft/ow/update/ + https://www.normalesup.org/~simonet/soft/ow/update/ quicksearch p2 - http://dist.springsource.com/release/TOOLS/update/e4.3/ + https://dist.springsource.com/release/TOOLS/update/e4.3/ --> diff --git a/pom.xml b/pom.xml index b8624f65..90cfb3f8 100644 --- a/pom.xml +++ b/pom.xml @@ -171,7 +171,7 @@ kepler p2 - http://download.eclipse.org/releases/kepler + https://download.eclipse.org/releases/kepler