Deprecate insecure download strategies

This commit is contained in:
Jack Nagel 2014-10-18 17:39:53 -05:00
parent 93c71bafca
commit f8c0c27566

View File

@ -630,6 +630,12 @@ class ResourceAuditor
def audit_download_strategy def audit_download_strategy
return unless using return unless using
if using == :ssl3 || using == CurlSSL3DownloadStrategy
problem "The SSL3 download strategy is deprecated, please choose a different URL"
elsif using == CurlUnsafeDownloadStrategy
problem "#{using.name} is deprecated, please choose a different URL"
end
url_strategy = DownloadStrategyDetector.detect(url) url_strategy = DownloadStrategyDetector.detect(url)
using_strategy = DownloadStrategyDetector.detect('', using) using_strategy = DownloadStrategyDetector.detect('', using)