enforce repository url verification for passing authz

in your settings you have:

    <server>
      <username>olamy</username>
      <password>reallycomplicatedpassword</password>
      <id>foo.org</id>
    </server>

During dependencies resolution, you get a pom with a repository.

    <repository>
      <id>foo.org</id>
      <url>http://yourpasswordwillbehacked.org/</url>
    </repository>

Idea id in settings must contains the target hostname.

No work has yet been logged on this issue.

Vote (0)

Watch (0)