Gabor Kecskemeti created MASSEMBLY-971:
------------------------------------------

             Summary: Symbolic links created by the plugin are absolute (i.e., 
the build environment is leaking through them)
                 Key: MASSEMBLY-971
                 URL: https://issues.apache.org/jira/browse/MASSEMBLY-971
             Project: Maven Assembly Plugin
          Issue Type: Bug
    Affects Versions: 3.4.2
         Environment: ubuntu 22.04, maven 3.8.6, assembly plugin 3.4.2
            Reporter: Gabor Kecskemeti


To recreate this:

create a folder, then create a file in it. create a symlink to the file from 
the parent of the previously created folder (should be a relative link e.g., 
run ln -s folder/file from parent).

create an assembly descriptor that creates a tar.gz from the parent of the 
above create folder and run it. 1) The produced tgz will contain a symlink 
which is broken. 2) the produced symlink leaks information about the build 
environment as instead of the original folder/file symlink we end up with the 
complete path of the assembled project + parent/folder/file.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to