gnodet opened a new pull request, #12565: URL: https://github.com/apache/maven/pull/12565
Backport of #12410 to `maven-4.0.x`. Coordinate ids (groupId, artifactId) and versions equal to `.` or `..` pass character validation but become path-traversal segments in the local repository layout. Both the `maven-impl` and compat `maven-model-builder` validators now reject these values. Tests added for both modules. Conflict resolution: trivial variable naming difference (`i`/`c` on 4.0.x vs `index`/`character` on master). -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
