search

eclipse-m2e / m2e-core

Eclipse Public License 2.0
113 stars 115 forks source link

Remove m2e.projectLocation #993

Open vpinna80 opened 2 years ago

vpinna80 commented 2 years ago

Please provide a way to remove project location from maven.properties when building through Eclipse IDE (or remove the file entirely). This file can easily slip into an artifact and may cause a security issue.

mickaelistria commented 2 years ago

To be honest, this seems like a very low value/priority task to most active contributors. Would you be willing to try submitting a PR that implements that?

fbricon commented 2 years ago

honestly, if you're concerned about security issues while building/shipping artifacts from a developer's machine instead of a CI build, your concerns are misplaced.

watuwo commented 1 year ago

You can search "m2e.projectLocation" on Google to find some affected people. I guess if there were a checkbox labelled "show the world how messy my computer is" or "associate this code with my real name" at least some would not have activated it. For me this issue is related to privacy protection, careful handling of privileged information and trust.

HannesWell commented 1 year ago

I guess if there were a checkbox labelled "show the world how messy my computer is" or "associate this code with my real name" at least some would not have activated it.

We would welcome a quality contribution. :)