gnodet commented on PR #2079: URL: https://github.com/apache/maven-resolver/pull/2079#issuecomment-5477485964
Closing — all path-traversal fixes from this PR have been superseded by cstamas's independent implementations: - #2087: Validate coordinate components in the Maven 2 layout and local path composer - #2088: FileTransporter: contain resolved resource paths under the repository base - #2089: Neutralize dot-only repository ids in path segment conversion - #2091: Compose named lock keys one segment per coordinate field All findings (f001, f003, f010, f017) from the security audit are now addressed in master. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
