github-mirrors/DependencyCheck
1
0
Fork 0
mirror of https://github.com/ysoftdevs/DependencyCheck.git synced 2026-03-25 02:21:28 +01:00
Code Issues Packages Projects Releases Wiki Activity

updated to use HTTP or HTTPS as appropriate for the download URL

Browse Source 
Former-commit-id: a285898cfb8ae9d2dd92549b8136c64cc551d1a4
This commit is contained in:
Jeremy Long
2015-05-09 07:58:40 -04:00
parent 38413c4f64
commit d1d53ee65b
1 changed files with 11 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

15
dependency-check-core/src/main/java/org/owasp/dependencycheck/data/nexus/MavenArtifact.java
View File

@@ -27,7 +27,7 @@ public class MavenArtifact {
/** /**
* The base URL for download artifacts from Central. * The base URL for download artifacts from Central.
*/ */
private static final String CENTRAL_CONTENT_URL = "http://search.maven.org/remotecontent?filepath="; private static final String CENTRAL_CONTENT_URL = "//search.maven.org/remotecontent?filepath=";
/** /**
* The groupId * The groupId
@@ -80,19 +80,26 @@ public class MavenArtifact {
* @param version the version * @param version the version
* @param jarAvailable if the jar file is available from central * @param jarAvailable if the jar file is available from central
* @param pomAvailable if the pom file is available from central * @param pomAvailable if the pom file is available from central
* @param secureDownload if the jar and pom files should be downloaded using HTTPS.
*/ */
public MavenArtifact(String groupId, String artifactId, String version, boolean jarAvailable, boolean pomAvailable) { public MavenArtifact(String groupId, String artifactId, String version, boolean jarAvailable, boolean pomAvailable, boolean secureDownload) {
this.groupId = groupId; this.groupId = groupId;
this.artifactId = artifactId; this.artifactId = artifactId;
this.version = version; this.version = version;
String base;
if (secureDownload) {
base = "https:" + CENTRAL_CONTENT_URL;
} else {
base = "http:" + CENTRAL_CONTENT_URL;
}
if (jarAvailable) { if (jarAvailable) {
//org/springframework/spring-core/3.2.0.RELEASE/spring-core-3.2.0.RELEASE.pom //org/springframework/spring-core/3.2.0.RELEASE/spring-core-3.2.0.RELEASE.pom
this.artifactUrl = this.CENTRAL_CONTENT_URL + groupId.replace('.', '/') + "/" + artifactId.replace('.', '/') + "/" this.artifactUrl = base + groupId.replace('.', '/') + "/" + artifactId + "/"
+ version + "/" + artifactId + "-" + version + ".jar"; + version + "/" + artifactId + "-" + version + ".jar";
} }
if (pomAvailable) { if (pomAvailable) {
//org/springframework/spring-core/3.2.0.RELEASE/spring-core-3.2.0.RELEASE.pom //org/springframework/spring-core/3.2.0.RELEASE/spring-core-3.2.0.RELEASE.pom
this.pomUrl = this.CENTRAL_CONTENT_URL + groupId.replace('.', '/') + "/" + artifactId.replace('.', '/') + "/" this.pomUrl = base + groupId.replace('.', '/') + "/" + artifactId + "/"
+ version + "/" + artifactId + "-" + version + ".pom"; + version + "/" + artifactId + "-" + version + ".pom";
} }
} }