summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorJason Karns <[email protected]>2022-10-28 15:30:21 -0400
committerHiroshi SHIBATA <[email protected]>2022-11-11 17:24:08 +0900
commitceeefb5870c144ddc069b2c9b8a19dbd4947a947 ()
tree5dd7e907e66e73cfc82ff3048577ec739d4e8397
parentadfbee85e07494d42e54b1c616e5fa62a207fb8f (diff)
[rubygems/rubygems] source should default to secure protocol
Bundler 2 switched to secure https here https://.com/rubygems/rubygems/commit/c2e81f8ff63613871cc8b52653c5e176f8dafde3 Insecure protocols should be avoided to prevent MITM attacks. https://.com/rubygems/rubygems/commit/758413364a
Notes: Merged: https://.com/ruby/ruby/pull/6715
-rw-r--r--lib/rubygems/request_set/gem_dependency_api.rb2
-rw-r--r--test/rubygems/test_gem_request_set_gem_dependency_api.rb4
2 files changed, 3 insertions, 3 deletions
@@ -214,7 +214,7 @@ class Gem::RequestSet::GemDependencyAPI
git_source : do |repo_name|
repo_name = "#{repo_name}/#{repo_name}" unless repo_name.include? "/"
- "git://.com/#{repo_name}.git"
end
git_source :bitbucket do |repo_name|
@@ -183,7 +183,7 @@ class TestGemRequestSetGemDependencyAPI < Gem::TestCase
assert_equal [dep("a")], @set.dependencies
- assert_equal %w[git://.com/example/repository.git master],
@git_set.repositories["a"]
expected = { "a" => Gem::Requirement.create("!") }
@@ -196,7 +196,7 @@ class TestGemRequestSetGemDependencyAPI < Gem::TestCase
assert_equal [dep("a")], @set.dependencies
- assert_equal %w[git://.com/example/example.git master],
@git_set.repositories["a"]
expected = { "a" => Gem::Requirement.create("!") }