Just a couple minor remarks here:

On Sun, May 31, 2020 at 4:39 PM Erik Costlow <erikcost...@outlook.com> wrote:
> This does not impact users of other build systems […] or even most ant users.

Specifically, if you use either freeform or autoproject you can use
Ant as the build tool for your NetBeans project without the specific
project layout targeted by this attack.

> The majority of NetBeans projects leverage native build tool integrations 
> that is shared with continuous integration systems.

The managed Ant-based project types (such as in the `java.j2seproject`
module) _can_ be shared with CI systems. In fact this was a key design
goal at the time, when Java developers would typically do local builds
using proprietary IDE tooling, and then write something else for CI
(if they were doing CI at all) and try to keep the two sets of
configurations in synch.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@netbeans.apache.org
For additional commands, e-mail: dev-h...@netbeans.apache.org

For further information about the NetBeans mailing lists, visit:
https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+lists



Reply via email to