464555 - ALPN module download attempts to download jar before dir exists

+ Ensure directory exists for output before download is attempted.

jetty-start/src/main/java/org/eclipse/jetty/start/BaseBuilder.java

@@ -251,11 +251,15 @@ public class BaseBuilder
     {
         if (startArgs.isDownload() && (arg.uri != null))
         {
+            // now on copy/download paths (be safe above all else)
             if (!file.startsWith(baseHome.getBasePath()))
             {
-                throw new IOException("For security reasons, Jetty start is unable to process file resource not in ${jetty.base} - " + file);
+                throw new IOException("For security reasons, Jetty start is unable to process maven file resource not in ${jetty.base} - " + file);
             }
             
+            // make the directories in ${jetty.base} that we need
+            FS.ensureDirectoryExists(file.getParent());
+            
             URI uri = URI.create(arg.uri);
 
             // Process via initializers

jetty-start/src/main/java/org/eclipse/jetty/start/fileinits/MavenLocalRepoFileInitializer.java

@@ -108,11 +108,6 @@ public class MavenLocalRepoFileInitializer extends UriFileInitializer implements
             return true;
         }
 
-        if (!file.startsWith(baseHome.getBasePath()))
-        {
-            throw new IOException("For security reasons, Jetty start is unable to process maven file resource not in ${jetty.base} - " + file);
-        }
-        
         // If using local repository
         if (this.localRepositoryDir != null)
         {