Skip to content

Commit 8842e6a

Browse files
author
Adam Williams
committed
Use HTTPS in fullUrl by default for resources
Since no redirect or HSTS is in place, these downloads are vulnerable to being MitM'd. This commit changes all future links to use "HTTPS" in the protocol part instead of "HTTP". Related: scala/scala-lang#627
1 parent 75b24ae commit 8842e6a

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

src/main/scala/MakeDownloadPage.scala

+1-1
Original file line numberDiff line numberDiff line change
@@ -37,7 +37,7 @@ class MakeDownloadPage(version: String, releaseDate: Date = new Date()) {
3737

3838
def resourceArchive(cls: String, name: String, ext: String, desc: String): Future[String] = {
3939
val fileName = s"$name-$version.$ext"
40-
val fullUrl = s"http://downloads.lightbend.com/scala/$version/$fileName"
40+
val fullUrl = s"https://downloads.lightbend.com/scala/$version/$fileName"
4141
resource(cls, fileName, desc, fullUrl, fullUrl)
4242
}
4343

0 commit comments

Comments
 (0)