Uploaded image for project: 'Dev - Nexus Repo'
  1. Dev - Nexus Repo
  2. NEXUS-6542

Maven model classes are missing from xstream whiltelist configuration

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: 2.7.1, 2.7.2, 2.8
    • Fix Version/s: 2.8.1, 3.0.0-m1
    • Component/s: REST
    • Labels:
    • Release Note:
      Yes
    • Sprint:
      Sprint 15

      Description

      Some legacy restlet REST resources return org.apache.maven.model classes directly, but not all classes have alias configuration or are otherwise configured with converters, and the xstream whitelist bans them from being marshaled.


      Using https://user:pass@nexus.xxx.com/nexus/service/local/artifact/maven?r=snapshots&g=com.xxx&a=reporting_2.10&v=LATEST

      results in a HTTP 500:

      jvm 1 | 2014-04-15 17:08:04 ERROR [qtp303405156-51] admin org.sonatype.nexus.rest.NexusApplication - Unhandled exception or error intercepted
      jvm 1 | com.thoughtworks.xstream.converters.ConversionException: No converter specified for class org.apache.maven.model.Dependency
      jvm 1 | ---- Debugging information ----
      jvm 1 | -------------------------------
      jvm 1 | at com.thoughtworks.xstream.core.DefaultConverterLookup.lookupConverterForType(DefaultConverterLookup.java:61) ~[xstream-1.4.6-SONATYPE-02.jar:1.4.6-SONATYPE-02]
      jvm 1 | at com.thoughtworks.xstream.core.TreeMarshaller.convertAnother(TreeMarshaller.java:48) ~[xstream-1.4.6-SONATYPE-02.jar:1.4.6-SONATYPE-02]
      jvm 1 | at com.thoughtworks.xstream.core.TreeMarshaller.convertAnother(TreeMarshaller.java:43) ~[xstream-1.4.6-SONATYPE-02.jar:1.4.6-SONATYPE-02]

        Attachments

          Activity

            People

            Assignee:
            jdillon Jason Dillon
            Reporter:
            thenephilim Peter van Rensburg
            Last Updated By:
            Peter Lynch Peter Lynch
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

              Dates

              Created:
              Updated:
              Resolved:
              Date of First Response:

                tigCommentSecurity.panel-title