From 191582f272e87371af1628de577704c43314331b Mon Sep 17 00:00:00 2001 From: Jonathan Leitschuh Date: Tue, 11 Feb 2020 10:07:53 -0500 Subject: [PATCH] Use HTTPS instead of HTTP to resolve dependencies This fixes a security vulnerability in this project where the `pom.xml` files were configuring Maven to resolve dependencies over HTTP instead of HTTPS. Signed-off-by: Jonathan Leitschuh --- pom.xml | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/pom.xml b/pom.xml index 0450d3e4..5002c343 100644 --- a/pom.xml +++ b/pom.xml @@ -46,32 +46,32 @@ yedit p2 - http://dadacoalition.org/yedit + https://dadacoalition.org/yedit eclipse p2 - http://download.eclipse.org/releases/${eclipse.name} + https://download.eclipse.org/releases/${eclipse.name} dltk p2 - http://download.eclipse.org/technology/dltk/updates-dev/${dltk.version}/ + https://download.eclipse.org/technology/dltk/updates-dev/${dltk.version}/ pdt p2 - http://download.eclipse.org/tools/pdt/updates/${pdt.version}/ + https://download.eclipse.org/tools/pdt/updates/${pdt.version}/ orbit p2 - http://download.eclipse.org/tools/orbit/downloads/drops/R20150519210750/repository/ + https://download.eclipse.org/tools/orbit/downloads/drops/R20150519210750/repository/ Sonatype-public SnakeYAML repository - http://oss.sonatype.org/content/groups/public/ + https://oss.sonatype.org/content/groups/public/ doctrine