mirrors/fdroidserver
1
0
Fork 0
mirror of https://github.com/f-droid/fdroidserver.git synced 2025-09-13 14:32:28 +03:00
Code Issues Projects Releases Packages Wiki Activity Actions

scanner: only allow HTTPS versions of the whitelist

Browse source
This commit is contained in:
Hans-Christoph Steiner 2019-11-06 09:00:32 +01:00
parent e6bf586e74
commit b95f66a806
No known key found for this signature in database
GPG key ID: 3E177817BA1B9BFA
1 changed files with 1 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
fdroidserver/scanner.py
View file

@ -96,7 +96,7 @@ def scan_source(build_dir, build=metadata.Build()):
gradle_mavenrepo = re.compile(r'maven *{ *(url)? *[\'"]?([^ \'"]*)[\'"]?') gradle_mavenrepo = re.compile(r'maven *{ *(url)? *[\'"]?([^ \'"]*)[\'"]?')
allowed_repos = [re.compile(r'^https?://' + re.escape(repo) + r'/*') for repo in [ allowed_repos = [re.compile(r'^https://' + re.escape(repo) + r'/*') for repo in [
'repo1.maven.org/maven2', # mavenCentral() 'repo1.maven.org/maven2', # mavenCentral()
'jcenter.bintray.com', # jcenter() 'jcenter.bintray.com', # jcenter()
'jitpack.io', 'jitpack.io',