gnu: java-xz: Mark source as zipbomb.

* gnu/packages/java-compression.scm (java-xz)[source]: Download source
as zipbomb.
[argments]: Remove custom 'chdir phase.
This commit is contained in:
Efraim Flashner 2021-07-11 14:07:00 +03:00
parent 24edccba3d
commit 7760d28920
No known key found for this signature in database
GPG key ID: 41AAE7DCCA3D8351

View file

@ -291,7 +291,7 @@ (define-public java-xz
(name "java-xz")
(version "1.6")
(source (origin
(method url-fetch)
(method url-fetch/zipbomb)
(uri (string-append "https://tukaani.org/xz/xz-java-" version ".zip"))
(sha256
(base32
@ -301,12 +301,6 @@ (define-public java-xz
`(#:tests? #f; no tests
#:phases
(modify-phases %standard-phases
(add-after 'unpack 'chdir
(lambda _
;; Our build system enters the first directory in the archive, but
;; the package is not contained in a subdirectory
(chdir "..")
#t))
(add-before 'install 'generate-pom
(lambda _
(copy-file "maven/pom_template.xml" "pom.xml")