HomePhabricator

Use HTTPS, not HTTP, in install scripts

Description

Use HTTPS, not HTTP, in install scripts

Summary:
Via HackerOne. A researcher correctly reports that our install scripts use HTTP, not HTTPS, to fetch resources and execute them as root, which is a potentially significant vulnerability.

Instead, use HTTPS.

Test Plan: Verified that these URIs function correctly over HTTPS.

Reviewers: chad

Reviewed By: chad

Differential Revision: https://secure.phabricator.com/D16958

Details

Provenance
epriestleyAuthored on Nov 29 2016, 1:25 PM
epriestleyPushed on Nov 29 2016, 8:11 PM
Reviewer
chad
Differential Revision
D16958: Use HTTPS, not HTTP, in install scripts
Parents
rPd1838fa5ec5e: Close lightbox when clicking on image-frame
Branches
Unknown
Tags
Unknown
Build Status
Buildable 14706
Build 19215: Run Core Tests