Skip to content

Commit 2aabcbc

Browse files
authored
Use HTTPS in fullUrl by default for resources
Since no redirect or HSTS is in place, these downloads are vulnerable to being MitM'd. This commit changes all future links to use "HTTPS" in the protocol part instead of "HTTP". Related: scala/scala-lang#627
1 parent 75b24ae commit 2aabcbc

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

src/main/scala/MakeDownloadPage.scala

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -37,7 +37,7 @@ class MakeDownloadPage(version: String, releaseDate: Date = new Date()) {
3737

3838
def resourceArchive(cls: String, name: String, ext: String, desc: String): Future[String] = {
3939
val fileName = s"$name-$version.$ext"
40-
val fullUrl = s"http://downloads.lightbend.com/scala/$version/$fileName"
40+
val fullUrl = s"https://downloads.lightbend.com/scala/$version/$fileName"
4141
resource(cls, fileName, desc, fullUrl, fullUrl)
4242
}
4343

0 commit comments

Comments
 (0)