[
https://issues.apache.org/jira/browse/ARCHETYPE-521?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15981079#comment-15981079
]
Veit Guna commented on ARCHETYPE-521:
-------------------------------------
Hi guys.
That really sucks :(. How is specifying an url via cmdline considered a
security risk :)? Whether I specify it on cmdline or settings.xml is same
"risky", no?
Please describe how this can be used as an attack vector - for my better
understanding.
Besides that, I now can't just paste a cmdline and create a project from a
non-central archetype repository anymore. I now have to add that custom
archetype repository to my settings.xml first, before I can invoke the generate
step. And I will do that most likely only once, maybe twice. So I have to
remove it after the project has been generate. Yay! That's what I call making
your life more difficult than it has to be.
Sorry for sounding that harsh, but I'm currently not getting the reason for
such a breaking change.
> Cannot specify remote repository for generate project from archetype
> --------------------------------------------------------------------
>
> Key: ARCHETYPE-521
> URL: https://issues.apache.org/jira/browse/ARCHETYPE-521
> Project: Maven Archetype
> Issue Type: Question
> Components: Generator
> Affects Versions: 3.0.0
> Environment: cmd
> Reporter: Dmytro Sylaiev
> Assignee: Robert Scholte
> Labels: bug, command-line, question
> Fix For: 3.0.1
>
>
> I wanted to create new project using mvn archetype:generate command.
> Desired archetype was absent in the central repo, so I tried to use
> -DarchetypeRepository=repo.url param. But this param is out of date in 3.0.0
> version of plugin.
> So I needed to use mvn
> org.apache.maven.plugins:maven-archetype-plugin:2.4:generate command.
> Question: How can I specify specific repository for generating project
> (without editing settings.xml file)?
> (-DarchetypeCatalog=repo.url doesn't work too)
--
This message was sent by Atlassian JIRA
(v6.3.15#6346)
