[MBUILDCACHE-86] Bugfix and enhancements with the restoration of outputs on disk

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 1.2.0
• Labels: pull-request-available
• Assignee: Olivier Lamy
• Reporter: Kevin Buntrock
• Created: 19/Apr/24 12:45
• Updated: 10/Jun/24 08:33
• Resolved: 01/May/24 05:27

Description

Fixes :

• Files containing an underscore in their name can't be restored in the cache directory correctly (not in the same directory location).
• The cache is able to extract/restore files in locations outside the project. I guess the extraction part is not a vulnerability since someone with commit permissions can guess other ways to extract data. But the possibility of restoring at any place on the disk looks pretty dangerous to me if a remote cache server is compromised.

Enhancements :

• Possibility to restore artefacts on disk, with a dedicated property : maven.build.cache.restoreOnDiskArtefacts (default to true). Meaning in the project directory, as opposed to the cache directory.
  • IDE integration and use of the cache locally in developement is way easier. It is now possible to retrieve a cached jar in the "target" directory.
• Introduce "globs" to filter extra attached outputs by filenames.

Issue Links

• links to: GitHub Pull Request #104