luke/sbt
1
0
Fork 0
mirror of https://github.com/sbt/sbt.git synced 2026-10-07 18:43:31 +02:00
Code Issues Packages Projects Releases Wiki Activity

Drop OkHttp dependency

Browse Source 
Ref https://github.com/sbt/sbt/issues/6912

Problem
-------
There's apparently a security issue with OkHttp 3.x,
which I am not really sure how applicable it is to our usage
of OkHttp but it is there.

Solution
--------
Since most of OkHttp-specic usage within LM is for Apache Ivy
downloading, I am going to drop this.
Since `sbt.librarymanagement.Http.http` is a public API,
I am substituting this with Apache HTTP backed implementation.
This commit is contained in:
Eugene Yokota
2022-06-12 22:24:44 -04:00
parent 91bf2649b2
commit 76452e53ff
10 changed files with 19 additions and 466 deletions
Download Patch File Download Diff File Expand all files Collapse all files
core/src/main/scala/sbt/librarymanagement/Http.scala
+1 -1
View File
@@ -1,6 +1,6 @@
package sbt.librarymanagement
import gigahorse._, support.okhttp.Gigahorse
import gigahorse._, support.apachehttp.Gigahorse
import scala.concurrent.duration.DurationInt
object Http {