Fixed
Details
Assignee
Michael OffnerMichael OffnerReporter
Michael OffnerMichael OffnerLabels
New Issue warning screen
Before you create a new Issue, please post to the mailing list first https://dev.lucee.org
Once the issue has been verified, one of the Lucee team will ask you to file an issue
Sprint
NoneFix versions
Priority
NewParent
Details
Details
Assignee
Michael Offner
Michael OffnerReporter
Michael Offner
Michael OffnerLabels
New Issue warning screen
Before you create a new Issue, please post to the mailing list first https://dev.lucee.org
Once the issue has been verified, one of the Lucee team will ask you to file an issue
Sprint
None
Fix versions
Priority
NewParent
Created 26 January 2025 at 09:59
Updated 3 February 2025 at 16:08
Resolved 3 February 2025 at 16:08
Implement checksum verification for Maven dependencies in Lucee to enhance security and integrity of downloaded artifacts.
Technical Requirements:
Allow defining expected checksums in dependency declarations
Compare defined checksum against downloaded artifact checksum
Maintain existing verification between header checksum and file-generated checksum
Support common checksum algorithms (SHA-1, SHA-256, MD5)