commit 38d081986b07ba56c4c5dfb29a8f266880cdaec1
author Jonathan Leitschuh <jonathan.leitschuh@gmail.com> Mon Feb 17 17:29:48 2020 -0500
committer GitHub <noreply@github.com> Mon Feb 17 23:29:48 2020 +0100
tree ee42ecdf70839c99f6a19453111175f8c6fa3aed
parent 706c01c799862dee86b9465de64baef44cf61ce7

Use HTTPS to resolve dependencies in Maven Build (#4391)

* Use HTTPS instead of HTTP to resolve dependencies

This fixes a security vulnerability in this project where the `pom.xml`
files were configuring Maven to resolve dependencies over HTTP instead of
HTTPS.

Signed-off-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>

* Update pom.xml

Co-authored-by: Maxim Nesen <24524084+senivam@users.noreply.github.com>

media/moxy/pom.xml

diff --git a/media/moxy/pom.xml b/media/moxy/pom.xml
index 0b7a244..1b02cc5 100644
--- a/media/moxy/pom.xml
+++ b/media/moxy/pom.xml
@@ -1,7 +1,7 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <!--
 
-    Copyright (c) 2012, 2019 Oracle and/or its affiliates. All rights reserved.
+    Copyright (c) 2012, 2020 Oracle and/or its affiliates. All rights reserved.
 
     This program and the accompanying materials are made available under the
     terms of the Eclipse Public License v. 2.0, which is available at
@@ -130,7 +130,7 @@
         <repository>
             <id>eclipselink.repository</id>
             <name>Eclipse Maven Repository</name>
-            <url>http://download.eclipse.org/rt/eclipselink/maven.repo</url>
+            <url>https://download.eclipse.org/rt/eclipselink/maven.repo</url>
             <layout>default</layout>
         </repository>
     </repositories>

pom.xml

diff --git a/pom.xml b/pom.xml
index 9e8550a..a157ec4 100644
--- a/pom.xml
+++ b/pom.xml
@@ -1112,7 +1112,7 @@
                 <repository>
                     <id>eclipselink.repository</id>
                     <name>Eclipse Maven Repository</name>
-                    <url>http://www.eclipse.org/downloads/download.php?r=1&amp;nf=1&amp;file=/rt/eclipselink/maven.repo</url>
+                    <url>https://www.eclipse.org/downloads/download.php?r=1&amp;nf=1&amp;file=/rt/eclipselink/maven.repo</url>
                     <layout>default</layout>
                 </repository>
             </repositories>