Deprecate insecure download strategies
This commit is contained in:
		
							parent
							
								
									93c71bafca
								
							
						
					
					
						commit
						f8c0c27566
					
				@ -630,6 +630,12 @@ class ResourceAuditor
 | 
			
		||||
  def audit_download_strategy
 | 
			
		||||
    return unless using
 | 
			
		||||
 | 
			
		||||
    if using == :ssl3 || using == CurlSSL3DownloadStrategy
 | 
			
		||||
      problem "The SSL3 download strategy is deprecated, please choose a different URL"
 | 
			
		||||
    elsif using == CurlUnsafeDownloadStrategy
 | 
			
		||||
      problem "#{using.name} is deprecated, please choose a different URL"
 | 
			
		||||
    end
 | 
			
		||||
 | 
			
		||||
    url_strategy   = DownloadStrategyDetector.detect(url)
 | 
			
		||||
    using_strategy = DownloadStrategyDetector.detect('', using)
 | 
			
		||||
 | 
			
		||||
 | 
			
		||||
		Loading…
	
	
			
			x
			
			
		
	
		Reference in New Issue
	
	Block a user