3 ms·
Yep, https. Look at the last two URLs at the very end of the file: https://github.com/gnachman/iTerm2/blob/master/plists/release-iTerm2.plist https://github.co
by gnachman 11y ago
Yep, https. Look at the last two URLs at the very end of the file:
https://github.com/gnachman/iTerm2/blob/master/plists/release-iTerm2.plist https://github.com/gnachman/iTerm2/blob/master/plists/releas...
Likewise, all HTTPS here:
http://iterm2.com/appcasts/testing3.xml http://iterm2.com/appcasts/testing3.xml
If you're on Mac OS 10.11, we don't disable app transport security, so the OS prevents us from making HTTP requests at all.
- blckshp 11y agoOK. Thanks. And what about the risk of parsing file:// and ftp:// and other protocols inside the WebView component What assurances can you give that there is not security flaw on the server that allows replacing XML file?