archive/ruby
1
0
Fork 0
mirror of https://github.com/ruby/ruby.git synced 2025-09-15 16:44:01 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions 4

[rubygems/rubygems] github source should default to secure protocol

Browse source 
Bundler 2 switched to secure https here c2e81f8ff6

Insecure protocols should be avoided to prevent MITM attacks.

758413364a
This commit is contained in:
Jason Karns 2022-10-28 15:30:21 -04:00 • committed by Hiroshi SHIBATA
parent adfbee85e0
commit ceeefb5870
Notes: git 2025-04-09 13:49:37 +00:00
2 changed files with 3 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

2
lib/rubygems/request_set/gem_dependency_api.rb
View file

@ -214,7 +214,7 @@ class Gem::RequestSet::GemDependencyAPI
git_source :github do |repo_name|
repo_name = "#{repo_name}/#{repo_name}" unless repo_name.include? "/"
"git://github.com/#{repo_name}.git"
"https://github.com/#{repo_name}.git"
end
git_source :bitbucket do |repo_name|

4
test/rubygems/test_gem_request_set_gem_dependency_api.rb
View file

@ -183,7 +183,7 @@ class TestGemRequestSetGemDependencyAPI < Gem::TestCase
assert_equal [dep("a")], @set.dependencies
assert_equal %w[git://github.com/example/repository.git master],
assert_equal %w[https://github.com/example/repository.git master],
@git_set.repositories["a"]
expected = { "a" => Gem::Requirement.create("!") }
@ -196,7 +196,7 @@ class TestGemRequestSetGemDependencyAPI < Gem::TestCase
assert_equal [dep("a")], @set.dependencies
assert_equal %w[git://github.com/example/example.git master],
assert_equal %w[https://github.com/example/example.git master],
@git_set.repositories["a"]
expected = { "a" => Gem::Requirement.create("!") }