New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Block external HTTP insecure URLs in Maven registry client #1465

Open

cuixq opened this issue Dec 23, 2024 · 1 comment

Labels

guided remediation stale

Contributor

cuixq commented Dec 23, 2024 •

edited

Loading

From Maven 3.8.1, external HTTP insecure URLs are blocked by default.

We should follow the same practice in our Maven registry client.

cuixq added the guided remediation label

github-actions bot commented Feb 21, 2025

This issue has not had any activity for 60 days and will be automatically closed in two weeks

See https://github.com/google/osv-scanner/blob/main/CONTRIBUTING.md for how to contribute a PR if you're interested in helping out.

github-actions bot added the stale label

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment