mirror of
https://we.phorge.it/source/phorge.git
synced 2025-04-09 02:48:41 +02:00
Summary: Via HackerOne. A researcher correctly reports that our install scripts use `HTTP`, not `HTTPS`, to fetch resources and execute them as `root`, which is a potentially significant vulnerability. Instead, use `HTTPS`. Test Plan: Verified that these URIs function correctly over `HTTPS`. Reviewers: chad Reviewed By: chad Differential Revision: https://secure.phabricator.com/D16958 |
||
---|---|---|
.. | ||
almanac | ||
cache | ||
celerity | ||
daemon | ||
diviner | ||
drydock | ||
fact | ||
files | ||
fpm | ||
init | ||
install | ||
lipsum | ||
repository | ||
search | ||
setup | ||
sms | ||
sql | ||
ssh | ||
symbols | ||
user | ||
util | ||
__init_script__.php |