Deprecate insecure download strategies
This commit is contained in:
parent
93c71bafca
commit
f8c0c27566
@ -630,6 +630,12 @@ class ResourceAuditor
|
||||
def audit_download_strategy
|
||||
return unless using
|
||||
|
||||
if using == :ssl3 || using == CurlSSL3DownloadStrategy
|
||||
problem "The SSL3 download strategy is deprecated, please choose a different URL"
|
||||
elsif using == CurlUnsafeDownloadStrategy
|
||||
problem "#{using.name} is deprecated, please choose a different URL"
|
||||
end
|
||||
|
||||
url_strategy = DownloadStrategyDetector.detect(url)
|
||||
using_strategy = DownloadStrategyDetector.detect('', using)
|
||||
|
||||
|
Loading…
x
Reference in New Issue
Block a user