Skip to content

The value of nonProxyHost is tampered by shell quoting

Describe the bug

The mvn deploy to the Gitlab packages does not work.

Expected behavior

The exclusion list should effective during mvn deploy.

Actual behavior

When running mvn deploy to host artefact into the Gitlab Packages, I encounter a 502 from my corporate proxy.

Logs and/or screenshots

My internal network is .corp, thus my gitlab is gitlab.corp and no_proxy varenv is set with .corp.

When running the pipeline in debug (both maven and gitlab-ci) we saw:

  • a suspicious http.nonProxyHosts="*.corp" inside the list of system properties (while other properties does not have quotes)
  • a suspicious '-Dhttps.nonProxyHosts="*.corp"' in the mvn command line