maven-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Veit Guna (JIRA)" <>
Subject [jira] [Commented] (ARCHETYPE-521) Cannot specify remote repository for generate project from archetype
Date Mon, 24 Apr 2017 12:22:04 GMT


Veit Guna commented on ARCHETYPE-521:

Hi guys.

That really sucks :(. How is specifying an url via cmdline considered a security risk :)?
Whether I specify it on cmdline or settings.xml is same "risky", no?
Please describe how this can be used as an attack vector - for my better understanding.

Besides that, I now can't just paste a cmdline and create a project from a non-central archetype
repository anymore. I now have to add that custom archetype repository to my settings.xml
first, before I can invoke the generate step. And I will do that most likely only once, maybe
twice. So I have to remove it after the project has been generate. Yay! That's what I call
making your life more difficult than it has to be.

Sorry for sounding that harsh, but I'm currently not getting the reason for such a breaking

> Cannot specify remote repository for generate project from archetype
> --------------------------------------------------------------------
>                 Key: ARCHETYPE-521
>                 URL:
>             Project: Maven Archetype
>          Issue Type: Question
>          Components: Generator
>    Affects Versions: 3.0.0
>         Environment: cmd
>            Reporter: Dmytro Sylaiev
>            Assignee: Robert Scholte
>              Labels: bug, command-line, question
>             Fix For: 3.0.1
> I wanted to create new project using mvn archetype:generate command.
> Desired archetype was absent in the central repo, so I tried to use -DarchetypeRepository=repo.url
param. But this param is out of date in 3.0.0 version of plugin.
> So I needed to use  mvn org.apache.maven.plugins:maven-archetype-plugin:2.4:generate
> Question: How can I specify specific repository for generating project (without editing
settings.xml file)? 
> (-DarchetypeCatalog=repo.url doesn't work too)

This message was sent by Atlassian JIRA

View raw message