minimal test for escaping issues in createTemplatesImpl

.github/workflows/publish.yml

@@ -1,40 +0,0 @@
-name: publish jar
-on:
-  push:
-    tags:
-      - "v*.*.*"
-permissions:
-  contents: write
-
-jobs:
-  publish:
-    runs-on: ubuntu-latest
-    permissions:
-      contents: write
-      packages: write
-    steps:
-      - uses: actions/checkout@v3
-      - uses: actions/setup-java@v3
-        with:
-          java-version: '8'
-          distribution: 'adopt'
-          cache: 'maven'
-      - name: Set version
-        run: mvn versions:set -DnewVersion=${{ github.ref_name }}
-      - name: Build jar
-        run: mvn -B clean package -DskipTests 
-      # - name: publish maven jar
-      #   run: mvn -B deploy -DskipTests -DrepositoryId=github
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-
-
-      - name: Rename artifact
-        run: mv target/ysoserial-${{ github.ref_name }}-all.jar target/ysoserial-all.jar
-
-      - name: Publish GitHub release
-        uses: softprops/action-gh-release@v1
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}        
-        with:
-          files: target/ysoserial-all.jar

.travis.yml

@@ -26,7 +26,6 @@ after_script:
       grep testcase -A1 | grep -B1 -E 'failure|error|skipped' | grep -v -- --
 
 matrix:
-  fast_finish: true
   allow_failures:
     - jdk: oraclejdk11
     - jdk: openjdk6

README.md

@@ -1,8 +1,12 @@
 
 # ysoserial
 
-[![GitHub release](https://img.shields.io/github/downloads/frohoff/ysoserial/latest/total)](https://github.com/frohoff/ysoserial/releases/latest/download/ysoserial-all.jar)
+[![Join the chat at https://gitter.im/frohoff/ysoserial](
-[![Travis Build Status](https://api.travis-ci.com/frohoff/ysoserial.svg?branch=master)](https://travis-ci.com/frohoff/ysoserial)
+    https://badges.gitter.im/frohoff/ysoserial.svg)](
+    https://gitter.im/frohoff/ysoserial?utm_source=badge&utm_medium=badge&utm_campaign=pr-badge&utm_content=badge)
+[![Download Latest Snapshot](https://img.shields.io/badge/download-master-green.svg)](
+    https://jitpack.io/com/github/frohoff/ysoserial/master-SNAPSHOT/ysoserial-master-SNAPSHOT.jar)
+[![Travis Build Status](https://api.travis-ci.org/frohoff/ysoserial.svg?branch=master)](https://travis-ci.org/frohoff/ysoserial)
 [![Appveyor Build status](https://ci.appveyor.com/api/projects/status/a8tbk9blgr3yut4g/branch/master?svg=true)](https://ci.appveyor.com/project/frohoff/ysoserial/branch/master)
 
 A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.
@@ -99,9 +103,14 @@ $ java -cp ysoserial.jar ysoserial.exploit.RMIRegistryExploit myhost 1099 Common
 
 ## Installation
 
-[![GitHub release](https://img.shields.io/github/downloads/frohoff/ysoserial/latest/total)](https://github.com/frohoff/ysoserial/releases/latest/download/ysoserial-all.jar)
+1. Download the latest jar from
+[JitPack](https://jitpack.io/com/github/frohoff/ysoserial/master-SNAPSHOT/ysoserial-master-SNAPSHOT.jar)
+[![Download Latest Snapshot](https://img.shields.io/badge/download-master-green.svg)](
+    https://jitpack.io/com/github/frohoff/ysoserial/master-SNAPSHOT/ysoserial-master-SNAPSHOT.jar)
 
-Download the [latest release jar](https://github.com/frohoff/ysoserial/releases/latest/download/ysoserial-all.jar) from GitHub releases.
+Note that GitHub-hosted releases were removed in compliance with the
+[GitHub Community Guidelines](
+    https://help.github.com/articles/github-community-guidelines/#what-is-not-allowed)
 
 ## Building
 

pom.xml

@@ -39,9 +39,7 @@
 							<mainClass>ysoserial.GeneratePayload</mainClass>
 						</manifest>
 					</archive>
-					<descriptors>
                     <descriptor>assembly.xml</descriptor>
-					</descriptors>
                 </configuration>
 				<executions>
 					<execution>
@@ -68,16 +66,6 @@
 	</build>
 
 	<repositories>
-		<repository>
-			<id>central</id>
-			<layout>default</layout>
-			<url>https://repo.maven.apache.org/maven2/</url>
-		</repository>		
-		<repository>
-			<id>ysoserial-m2-repo</id>
-			<layout>default</layout>
-			<url>https://raw.githubusercontent.com/frohoff/ysoserial-m2-repo/master</url>
-		</repository>
 		<repository>
 			<id>jenkins</id>
 			<layout>default</layout>
@@ -450,11 +438,4 @@
 		</profile>
 
 	</profiles>
-	<distributionManagement>
-		<repository>
-			<id>github</id>
-			<name>GitHub Packages</name>
-			<url>https://maven.pkg.github.com/frohoff/ysoserial</url>
-		</repository>
-	</distributionManagement>	
 </project>

src/test/java/ysoserial/test/payloads/PayloadsTest.java

@@ -203,7 +203,7 @@ public class PayloadsTest {
         File[] jars = dependencies.length > 0
             ? Maven.configureResolver()
                 .withMavenCentralRepo(true)
-                .withRemoteRepo("jenkins", "https://repo.jenkins-ci.org/public/", "default")
+                .withRemoteRepo("jenkins", "http://repo.jenkins-ci.org/public/", "default")
                 .resolve(dependencies).withoutTransitivity().asFile()
             : new File[0];
         URL[] urls = new URL[jars.length];