Uploaded image for project: 'Dev - Nexus Repo'
  1. Dev - Nexus Repo
  2. NEXUS-16853

Enhance content validation for maven-metadata.xml files

    XMLWordPrintable

    Details

    • Type: Improvement
    • Status: Closed
    • Priority: Major
    • Resolution: Done
    • Affects Version/s: 3.10.0
    • Fix Version/s: 3.16.0
    • Component/s: Maven
    • Labels:

      Description

      The current file content validation for maven-metadata.xml files does very little. Caching bad metadata.xml files from servers can lead to build failures.  Furthermore, it can often be difficult to clean up bad maven-metadata.xml files from a proxy's cache, and even if you do, they may just get downloaded again.

      Content validation for maven-metadata.xml files can be improved by parsing the files and making sure that:

      1. The GAV coordinates metadata.xml file are present in the file
      2. The GAV coordinates match the path the file is stored in

      Files which do not meet the above criteria should be rejected.

        Attachments

          Issue Links

            Activity

              People

              Assignee:
              jstephens Joseph Stephens
              Reporter:
              rseddon Rich Seddon
              Last Updated By:
              Peter Lynch
              Team:
              NXRM - Cypher
              Votes:
              9 Vote for this issue
              Watchers:
              10 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved:
                Date of First Response:

                  tigCommentSecurity.panel-title