Skip to content

Commit 3daf112

Browse files
huntr-helperd3m0n-r00tJamieSlomeAutomatedTesterdiemol
authored
Security Fix for Resources Downloaded over Insecure Protocol - huntr.dev (#8775)
* Fix MITM with https * Fix MITM with https * Fix MITM with https * Fix MITM with https * Fix MITM with https Co-authored-by: Sreekanth Sasi <sreekanthroot@gmail.com> Co-authored-by: Jamie Slome <jamie@418sec.com> Co-authored-by: David Burns <david.burns@theautomatedtester.co.uk> Co-authored-by: Diego Molina <diemol@users.noreply.github.com>
1 parent cc1ac60 commit 3daf112

2 files changed

Lines changed: 5 additions & 5 deletions

File tree

scripts/travis/install.sh

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -9,8 +9,8 @@ if [[ ! -z $CHROME ]]; then
99
CHROME_FULL_VERSION=${CHROME_VERSION%%.*}
1010
CHROME_MAJOR_VERSION=${CHROME_FULL_VERSION//[!0-9]}
1111
sudo rm /etc/apt/sources.list.d/google-chrome.list
12-
export CHROMEDRIVER_VERSION=`curl -s http://chromedriver.storage.googleapis.com/LATEST_RELEASE_${CHROME_MAJOR_VERSION%%.*}`
13-
curl -L -O "http://chromedriver.storage.googleapis.com/${CHROMEDRIVER_VERSION}/chromedriver_linux64.zip"
12+
export CHROMEDRIVER_VERSION=`curl -s https://chromedriver.storage.googleapis.com/LATEST_RELEASE_${CHROME_MAJOR_VERSION%%.*}`
13+
curl -L -O "https://chromedriver.storage.googleapis.com/${CHROMEDRIVER_VERSION}/chromedriver_linux64.zip"
1414
unzip chromedriver_linux64.zip && chmod +x chromedriver && sudo mv chromedriver /usr/local/bin
1515
fi
1616

third_party/closure/goog/ui/media/picasa.js

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -218,14 +218,14 @@ goog.ui.media.PicasaAlbumModel = function(
218218
var flashVars = {
219219
'host': 'picasaweb.google.com',
220220
'RGB': '0x000000',
221-
'feed': 'http://picasaweb.google.com/data/feed/api/user/' + userId +
221+
'feed': 'https://picasaweb.google.com/data/feed/api/user/' + userId +
222222
'/album/' + albumId + '?kind=photo&alt=rss' + authParam
223223
};
224224
flashVars[opt_autoplay ? 'autoplay' : 'noautoplay'] = '1';
225225

226226
var flashUrl = goog.html.TrustedResourceUrl.fromConstant(
227227
goog.string.Const.from(
228-
'http://picasaweb.google.com/s/c/bin/slideshow.swf'));
228+
'https://picasaweb.google.com/s/c/bin/slideshow.swf'));
229229
var player = new goog.ui.media.MediaModel.Player(flashUrl, flashVars);
230230

231231
this.setPlayer(player);
@@ -279,7 +279,7 @@ goog.ui.media.PicasaAlbumModel.newInstance = function(
279279
* @return {string} The URL of the album.
280280
*/
281281
goog.ui.media.PicasaAlbumModel.buildUrl = function(userId, albumId) {
282-
return 'http://picasaweb.google.com/' + userId + '/' + albumId;
282+
return 'https://picasaweb.google.com/' + userId + '/' + albumId;
283283
};
284284

285285

0 commit comments

Comments
 (0)