SGit
SGit copied to clipboard
insecure gradle
just in case someone is still working on this project: F-Droid lint just complained about
build/ch.phcoder.jigit/build.gradle
repositories {
mavenCentral()
maven {
url "http://repo.gradle.org/gradle/javascript-public"
}
gradle build uses plain HTTP URLs for repositories! This is insecure!
https://max.computer/blog/how-to-take-over-the-computer-of-any-java-or-clojure-or-scala-developer/
should be solved easily by changing the protocol to https
(page responds fine).