leandrof/linux
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Replace HTTP links with HTTPS ones: AFS FILESYSTEM

Browse Source 
Rationale:
Reduces attack surface on kernel devs opening the links for MITM
as HTTPS traffic is much harder to manipulate.

Deterministic algorithm:
For each file:
  If not .svg:
    For each line:
      If doesn't contain `\bxmlns\b`:
        For each link, `\bhttp://[^# \t\r\n]*(?:\w|/)`:
	  If neither `\bgnu\.org/license`, nor `\bmozilla\.org/MPL\b`:
            If both the HTTP and HTTPS versions
            return 200 OK and serve the same content:
              Replace HTTP with HTTPS.

Signed-off-by: Alexander A. Klimov <grandmaster@al2klimov.de>
Link: https://lore.kernel.org/r/20200708081403.13323-1-grandmaster@al2klimov.de
Signed-off-by: Jonathan Corbet <corbet@lwn.net>
This commit is contained in:
Alexander A. Klimov
2020-07-08 10:14:03 +02:00
committed by Jonathan Corbet
parent 561a75acda
commit 011c9ec330
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
Documentation/filesystems/afs.rst
View File

@@ -190,7 +190,7 @@ Security
Secure operations are initiated by acquiring a key using the klog program. A Secure operations are initiated by acquiring a key using the klog program. A
very primitive klog program is available at: very primitive klog program is available at:
http://people.redhat.com/~dhowells/rxrpc/klog.c https://people.redhat.com/~dhowells/rxrpc/klog.c
This should be compiled by:: This should be compiled by::