Skip to content

Commit 5f742c8

Browse files
Adam WilliamsSethTisue
Adam Williams
authored andcommitted
Use HTTPS in fullUrl by default for resources
Since no redirect or HSTS is in place, these downloads are vulnerable to being MitM'd. This commit changes all future links to use "HTTPS" in the protocol part instead of "HTTP". Related: scala/scala-lang#627
1 parent 9cfbdc8 commit 5f742c8

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

src/main/scala/MakeDownloadPage.scala

+1-1
Original file line numberDiff line numberDiff line change
@@ -37,7 +37,7 @@ class MakeDownloadPage(version: String, releaseDate: Date = new Date()) {
3737

3838
def resourceArchive(cls: String, name: String, ext: String, desc: String): Future[String] = {
3939
val fileName = s"$name-$version.$ext"
40-
val fullUrl = s"http://downloads.lightbend.com/scala/$version/$fileName"
40+
val fullUrl = s"https://downloads.lightbend.com/scala/$version/$fileName"
4141
resource(cls, fileName, desc, fullUrl)
4242
}
4343

0 commit comments

Comments
 (0)