1
0
Fork 0
mirror of https://we.phorge.it/source/phorge.git synced 2025-04-09 02:48:41 +02:00
phorge-phorge/scripts
epriestley 2d7abfd9fa Use HTTPS, not HTTP, in install scripts
Summary:
Via HackerOne. A researcher correctly reports that our install scripts use `HTTP`, not `HTTPS`, to fetch resources and execute them as `root`, which is a potentially significant vulnerability.

Instead, use `HTTPS`.

Test Plan: Verified that these URIs function correctly over `HTTPS`.

Reviewers: chad

Reviewed By: chad

Differential Revision: https://secure.phabricator.com/D16958
2016-11-29 12:11:04 -08:00
..
almanac
cache
celerity
daemon
diviner
drydock
fact
files
fpm
init
install Use HTTPS, not HTTP, in install scripts 2016-11-29 12:11:04 -08:00
lipsum
mail
repository
search
setup
sms
sql
ssh Cache generation of the SSH authentication keyfile for sshd 2016-10-21 07:29:40 -07:00
symbols
user
util
__init_script__.php