Hi all, As explained in another thread, I created https://github.com/apache/maven/pull/462 to backport the security fix on 3.8 in 3.6.x. Anyone able to review it? Only change is that the default configuration is not there but it can be enabled - idea is to document it instead of breaking by default.
Romain Manni-Bucau @rmannibucau <https://twitter.com/rmannibucau> | Blog <https://rmannibucau.metawerx.net/> | Old Blog <http://rmannibucau.wordpress.com> | Github <https://github.com/rmannibucau> | LinkedIn <https://www.linkedin.com/in/rmannibucau> | Book <https://www.packtpub.com/application-development/java-ee-8-high-performance>
