Deprecate insecure download strategies
This commit is contained in:
parent
93c71bafca
commit
f8c0c27566
@ -630,6 +630,12 @@ class ResourceAuditor
|
|||||||
def audit_download_strategy
|
def audit_download_strategy
|
||||||
return unless using
|
return unless using
|
||||||
|
|
||||||
|
if using == :ssl3 || using == CurlSSL3DownloadStrategy
|
||||||
|
problem "The SSL3 download strategy is deprecated, please choose a different URL"
|
||||||
|
elsif using == CurlUnsafeDownloadStrategy
|
||||||
|
problem "#{using.name} is deprecated, please choose a different URL"
|
||||||
|
end
|
||||||
|
|
||||||
url_strategy = DownloadStrategyDetector.detect(url)
|
url_strategy = DownloadStrategyDetector.detect(url)
|
||||||
using_strategy = DownloadStrategyDetector.detect('', using)
|
using_strategy = DownloadStrategyDetector.detect('', using)
|
||||||
|
|
||||||
|
Loading…
x
Reference in New Issue
Block a user