SGit icon indicating copy to clipboard operation
SGit copied to clipboard

insecure gradle

Open IzzySoft opened this issue 6 years ago • 0 comments

just in case someone is still working on this project: F-Droid lint just complained about

build/ch.phcoder.jigit/build.gradle
repositories {
  mavenCentral()
  maven {
    url "http://repo.gradle.org/gradle/javascript-public"
  }
gradle build uses plain HTTP URLs for repositories!  This is insecure!
https://max.computer/blog/how-to-take-over-the-computer-of-any-java-or-clojure-or-scala-developer/

should be solved easily by changing the protocol to https (page responds fine).

IzzySoft avatar Oct 20 '18 19:10 IzzySoft