kbuntrock commented on PR #104:
URL:
https://github.com/apache/maven-build-cache-extension/pull/104#issuecomment-2157707829
> The change to "Forbid the possibility to extract/restore data in a
directory outside the project" is a breaking change for some of my projects.
>
> In my case, I have several multi-module projects with child POMs
configured to use ../target/${project.artifactId} as their build directory in
order to have a single target dir in the parent rather than N children target
directories.
>
> Would you consider adding an opt-out option ? @kbuntrock
Hello @julien-pcd
I'm sorry to ear that. I see 3 options :
1. An opt-out parameter allowing to disable the security
2. A configuration parameter allowing a specific path for extract/restore.
By default it is `project.basedir` (the current hardcoded value)
3. Automatic detection of a wider allowed extract/restore area, based on
parents location resolution. But since you can specify relative path for
parents, I'm expecting a lot of edge cases.
My favourite solution is by far the number 2.
Could I have your opinion @AlexanderAshitkin and @olamy ?
And I wish a good day yo all of you! 😊
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
