mirror of
https://git.proxmox.com/git/mirror_ubuntu-kernels.git
synced 2025-11-07 06:13:45 +00:00
496b24ec6d
Rationale:
Reduces attack surface on kernel devs opening the links for MITM
as HTTPS traffic is much harder to manipulate.
Deterministic algorithm:
For each file:
If not .svg:
For each line:
If doesn't contain `\bxmlns\b`:
For each link, `\bhttp://[^# \t\r\n]*(?:\w|/)`:
If neither `\bgnu\.org/license`, nor `\bmozilla\.org/MPL\b`:
If both the HTTP and HTTPS versions
return 200 OK and serve the same content:
Replace HTTP with HTTPS.
Signed-off-by: Alexander A. Klimov <grandmaster@al2klimov.de>
Link: https://lore.kernel.org/r/20200713135018.34708-1-grandmaster@al2klimov.de
Signed-off-by: Kees Cook <keescook@chromium.org>
|
||
|---|---|---|
| .. | ||
| .gitignore | ||
| arm_ssp_per_task_plugin.c | ||
| cyc_complexity_plugin.c | ||
| gcc-common.h | ||
| gcc-generate-gimple-pass.h | ||
| gcc-generate-ipa-pass.h | ||
| gcc-generate-rtl-pass.h | ||
| gcc-generate-simple_ipa-pass.h | ||
| gen-random-seed.sh | ||
| Kconfig | ||
| latent_entropy_plugin.c | ||
| Makefile | ||
| randomize_layout_plugin.c | ||
| sancov_plugin.c | ||
| stackleak_plugin.c | ||
| structleak_plugin.c | ||