Messages in this thread | | | Date | Mon, 13 Jul 2020 09:32:24 -0700 | From | Kees Cook <> | Subject | Re: [PATCH] gcc-plugins: Replace HTTP links with HTTPS ones |
| |
On Mon, Jul 13, 2020 at 03:50:18PM +0200, Alexander A. Klimov wrote: > Rationale: > Reduces attack surface on kernel devs opening the links for MITM > as HTTPS traffic is much harder to manipulate. > > Deterministic algorithm: > For each file: > If not .svg: > For each line: > If doesn't contain `\bxmlns\b`: > For each link, `\bhttp://[^# \t\r\n]*(?:\w|/)`: > If neither `\bgnu\.org/license`, nor `\bmozilla\.org/MPL\b`: > If both the HTTP and HTTPS versions > return 200 OK and serve the same content: > Replace HTTP with HTTPS. > > Signed-off-by: Alexander A. Klimov <grandmaster@al2klimov.de>
Thanks! Applied to for-next/gcc-plugins
-- Kees Cook
| |