From 907d53ad3264718f66ff15e1363d76b07dd0c05f Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Herv=C3=A9=20Boutemy?= <hboutemy@apache.org> Date: Sat, 13 Mar 2021 19:03:43 +0100 Subject: [PATCH] [MNG-7118] block HTTP repositories by default --- apache-maven/src/conf/settings.xml | 11 +++++++++-- 1 file changed, 9 insertions(+), 2 deletions(-) diff --git a/apache-maven/src/conf/settings.xml b/apache-maven/src/conf/settings.xml index e27c579cf6db..99d8b1a4b01d 100644 --- a/apache-maven/src/conf/settings.xml +++ b/apache-maven/src/conf/settings.xml @@ -43,9 +43,9 @@ under the License. | values (values used when the setting is not specified) are provided. | |--> -<settings xmlns="http://maven.apache.org/SETTINGS/1.0.0" +<settings xmlns="http://maven.apache.org/SETTINGS/1.2.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" - xsi:schemaLocation="http://maven.apache.org/SETTINGS/1.0.0 http://maven.apache.org/xsd/settings-1.0.0.xsd"> + xsi:schemaLocation="http://maven.apache.org/SETTINGS/1.2.0 http://maven.apache.org/xsd/settings-1.2.0.xsd"> <!-- localRepository | The path to the local repository maven will use to store artifacts. | @@ -156,6 +156,13 @@ under the License. <url>http://my.repository.com/repo/path</url> </mirror> --> + <mirror> + <id>maven-default-http-blocker</id> + <mirrorOf>external:http:*</mirrorOf> + <name>Pseudo repository to mirror external repositories initially using HTTP.</name> + <url>http://0.0.0.0/</url> + <blocked>true</blocked> + </mirror> </mirrors> <!-- profiles