scanner: only allow HTTPS versions of the whitelist

This commit is contained in:
Hans-Christoph Steiner 2019-11-06 09:00:32 +01:00
parent e6bf586e74
commit b95f66a806
No known key found for this signature in database
GPG Key ID: 3E177817BA1B9BFA
1 changed files with 1 additions and 1 deletions

View File

@ -96,7 +96,7 @@ def scan_source(build_dir, build=metadata.Build()):
gradle_mavenrepo = re.compile(r'maven *{ *(url)? *[\'"]?([^ \'"]*)[\'"]?')
allowed_repos = [re.compile(r'^https?://' + re.escape(repo) + r'/*') for repo in [
allowed_repos = [re.compile(r'^https://' + re.escape(repo) + r'/*') for repo in [
'repo1.maven.org/maven2', # mavenCentral()
'jcenter.bintray.com', # jcenter()
'jitpack.io',