[ 
https://issues.apache.org/jira/browse/MASSEMBLY-971?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17601363#comment-17601363
 ] 

Stefan Seifert commented on MASSEMBLY-971:
------------------------------------------

this seems to be a duplicate of MASSEMBLY-965

> Symbolic links created by the plugin are absolute (i.e., the build 
> environment is leaking through them)
> -------------------------------------------------------------------------------------------------------
>
>                 Key: MASSEMBLY-971
>                 URL: https://issues.apache.org/jira/browse/MASSEMBLY-971
>             Project: Maven Assembly Plugin
>          Issue Type: Bug
>    Affects Versions: 3.4.2
>         Environment: ubuntu 22.04, maven 3.8.6, assembly plugin 3.4.2
>            Reporter: Gabor Kecskemeti
>            Priority: Major
>         Attachments: test971.sh
>
>
> To recreate this:
> create a folder, then create a file in it. create a symlink to the file from 
> the parent of the previously created folder (should be a relative link e.g., 
> run ln -s folder/file from parent).
> create an assembly descriptor that creates a tar.gz from the parent of the 
> above create folder and run it. 1) The produced tgz will contain a symlink 
> which is broken. 2) the produced symlink leaks information about the build 
> environment as instead of the original folder/file symlink we end up with the 
> complete path of the assembled project + parent/folder/file.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to