mirror of
https://github.com/lkl/linux.git
synced 2025-12-19 08:03:01 +09:00
encrypted-keys: Replace HTTP links with HTTPS ones
Rationale:
Reduces attack surface on kernel devs opening the links for MITM
as HTTPS traffic is much harder to manipulate.
Deterministic algorithm:
For each file:
If not .svg:
For each line:
If doesn't contain `\bxmlns\b`:
For each link, `\bhttp://[^# \t\r\n]*(?:\w|/)`:
If neither `\bgnu\.org/license`, nor `\bmozilla\.org/MPL\b`:
If both the HTTP and HTTPS versions
return 200 OK and serve the same content:
Replace HTTP with HTTPS.
Signed-off-by: Alexander A. Klimov <grandmaster@al2klimov.de>
Signed-off-by: David Howells <dhowells@redhat.com>
Reviewed-by: Ben Boeckel <mathstuf@gmail.com>
This commit is contained in:
committed by
David Howells
parent
1539dd785a
commit
c52b7c807b
@@ -2,7 +2,7 @@
|
|||||||
/*
|
/*
|
||||||
* Copyright (C) 2010 IBM Corporation
|
* Copyright (C) 2010 IBM Corporation
|
||||||
* Copyright (C) 2010 Politecnico di Torino, Italy
|
* Copyright (C) 2010 Politecnico di Torino, Italy
|
||||||
* TORSEC group -- http://security.polito.it
|
* TORSEC group -- https://security.polito.it
|
||||||
*
|
*
|
||||||
* Authors:
|
* Authors:
|
||||||
* Mimi Zohar <zohar@us.ibm.com>
|
* Mimi Zohar <zohar@us.ibm.com>
|
||||||
|
|||||||
Reference in New Issue
Block a user