[jbosstools-issues] [JBoss JIRA] (JBIDE-10058) extras updatesite exposes external updatesites making updates outofband possible without user actually explicitly asked for it

[Nick Boldt (Commented) (JIRA)]

    [ https://issues.jboss.org/browse/JBIDE-10058?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12637833#comment-12637833 ] 

Nick Boldt commented on JBIDE-10058:
------------------------------------

Fix committed to trunk and 33x branch to suppress the generated list of external references for product, product-soa, and extras sites. See ~/trunk/*/site/build.xml for the aforementioned 3 site builders. 


                
> extras updatesite exposes external updatesites making updates outofband possible without user actually explicitly asked for it
> ------------------------------------------------------------------------------------------------------------------------------
>
>                 Key: JBIDE-10058
>                 URL: https://issues.jboss.org/browse/JBIDE-10058
>             Project: Tools (JBoss Tools)
>          Issue Type: Bug
>          Components: updatesite
>            Reporter: Max Rydahl Andersen
>            Assignee: Nick Boldt
>            Priority: Blocker
>             Fix For: 3.3.0.Beta1
>
>
> extras site references:
> http://subclipse.tigris.org/update_1.6.x
> http://download.eclipse.org/egit/updates
> http://update.rockstarapps.com
> http://download.jboss.org/jbosstools/updates/m2eclipse-wtp
> http://eclipse-cs.sf.net/update
> http://eclipse.svnkit.com/1.3.x
> meaning if those receive updates users of JBDS will automatically get updated even though we haven't yet certified.
> If they actually explicitly added these then that is their choice, but we shouldn't expose that directly/upfront.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira