Skip to content

Commit 5f742c8

Browse files
Adam WilliamsSethTisue
authored andcommitted
Use HTTPS in fullUrl by default for resources
Since no redirect or HSTS is in place, these downloads are vulnerable to being MitM'd. This commit changes all future links to use "HTTPS" in the protocol part instead of "HTTP". Related: scala/scala-lang#627
1 parent 9cfbdc8 commit 5f742c8

1 file changed

Lines changed: 1 addition & 1 deletion

File tree

src/main/scala/MakeDownloadPage.scala

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -37,7 +37,7 @@ class MakeDownloadPage(version: String, releaseDate: Date = new Date()) {
3737

3838
def resourceArchive(cls: String, name: String, ext: String, desc: String): Future[String] = {
3939
val fileName = s"$name-$version.$ext"
40-
val fullUrl = s"http://downloads.lightbend.com/scala/$version/$fileName"
40+
val fullUrl = s"https://downloads.lightbend.com/scala/$version/$fileName"
4141
resource(cls, fileName, desc, fullUrl)
4242
}
4343

0 commit comments

Comments
 (0)