Skip to content

ktor sample - fix CWE-1104 - #114

Open
tomsun28 wants to merge 2 commits into
masterfrom
cwe-1104
Open

ktor sample - fix CWE-1104#114
tomsun28 wants to merge 2 commits into
masterfrom
cwe-1104

Conversation

@tomsun28

Copy link
Copy Markdown
Collaborator

Using a deprecated artifact repository may eventually give attackers access for a supply chain attack.

@tomsun28

Copy link
Copy Markdown
Collaborator Author

Could not find artifact io.ktor:ktor-server-tomcat:jar:1.3.2 in central (https://repo.maven.apache.org/maven2)
so the https://jcenter.bintray.com and https://kotlin.bintray.com/ktor must be there

        <repository>
            <id>repo1</id>
            <url>https://jcenter.bintray.com</url>
            <releases><enabled>true</enabled></releases>
            <snapshots><enabled>true</enabled></snapshots>
        </repository>
        <repository>
            <id>repo2</id>
            <url>https://kotlin.bintray.com/ktor</url>
            <releases><enabled>true</enabled></releases>
            <snapshots><enabled>true</enabled></snapshots>
        </repository>

@tomsun28 tomsun28 left a comment

Copy link
Copy Markdown
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

lgtm

Comment thread samples/ktor-sureness/pom.xml
Comment thread samples/ktor-sureness/pom.xml
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant