From 15edc4b8439eddaf3423d64878473427dff4bac2 Mon Sep 17 00:00:00 2001
From: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>
Date: Mon, 10 Feb 2020 22:29:47 -0500
Subject: [PATCH] Use HTTPS instead of HTTP to resolve dependencies
This fixes a security vulnerability in this project where the `pom.xml`
files were configuring Maven to resolve dependencies over HTTP instead of
HTTPS.
Signed-off-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>
---
pom.xml | 6 +++---
1 file changed, 3 insertions(+), 3 deletions(-)
diff --git a/pom.xml b/pom.xml
index a9be37b..21b590f 100644
--- a/pom.xml
+++ b/pom.xml
@@ -65,11 +65,11 @@
<repository>
<id>maven2-repository.dev.java.net</id>
<name>Java.net Repository for Maven</name>
- <url>http://download.java.net/maven/2/</url>
+ <url>https://download.java.net/maven/2/</url>
</repository>
<repository>
<id>bintray</id>
- <url>http://dl.bintray.com/akuznetsov/russianmorphology</url>
+ <url>https://dl.bintray.com/akuznetsov/russianmorphology</url>
<releases>
<enabled>true</enabled>
</releases>
@@ -83,7 +83,7 @@
<pluginRepository>
<id>mc-release</id>
<name>maven-license-plugin repository of releases</name>
- <url>http://mc-repo.googlecode.com/svn/maven2/releases</url>
+ <url>https://mc-repo.googlecode.com/svn/maven2/releases</url>
<snapshots>
<enabled>false</enabled>
</snapshots>