leechcraft.eclass: Always use HTTPS for accessing GitHub
authorDavid Hicks <david@hicks.id.au>
Sat, 29 Jul 2017 10:53:32 +0000 (20:53 +1000)
committerMichał Górny <mgorny@gentoo.org>
Sun, 30 Jul 2017 09:15:49 +0000 (11:15 +0200)
To prevent MITM attacks, always use HTTPS with GitHub domains. GitHub
supports "Smart HTTPS" git which means that shallow clones are possible
over HTTPS. Don't use a git:// fallback because this would allow an
attacker to always force fallback to an unsafe protocol.

eclass/leechcraft.eclass

index 49eb6f5b98868dd9445655a83206cb28fd78cd23..1c80745f524cb98e173a4250996e8c4cd6165f36 100644 (file)
@@ -28,8 +28,7 @@ esac
 inherit cmake-utils
 
 if [[ ${PV} == 9999 ]]; then
-       EGIT_REPO_URI="git://github.com/0xd34df00d/leechcraft.git
-                      https://github.com/0xd34df00d/leechcraft.git"
+       EGIT_REPO_URI="https://github.com/0xd34df00d/leechcraft.git"
 
        inherit git-r3
 else