Answering one of my own questions (for the archive), the files are unpacked because MavenUtils.getProject() expects a java.io.File argument for a Betwixt parser. I haven't used Betwixt, but I would expect there to be another method that takes an InputStream.

This suggests that the classloader object I included earlier could either provide special hooks for the project.xml and similar top-level files, returning InptuStreams that can be used by parsers, or the classloader can simply maintain some beanjars in the same package. This would add something like

    }
    else if (name.equals("project.xml")) {
       BeanReader pbr = getProjectBeanReader();
       Project project =
          (Project) pbr.parse(jf.getInputStream(ze));
       ProjectBeans.add(project);
    }

There is also some information encoded into the directory structure, but it's not clear to me if that's an issue with the plugin jars. If it is, the information can be easily cached somewhere.


Also, a bit of clarification on the motivations I was discussing last night. The question I keep coming back to is "how do I know this?" The more you know, the more you want to lock down everything. :-)



--------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]



Reply via email to