Strict https or ssh

README.md

@@ -27,6 +27,9 @@ Neobundle features: Early development (may break compatibility), very complex,
 good for plugin power users (for example, 50+ plugins and over 1000 lines
 .vimrc, ...)
 
+Note: Neobunle only accepts "https" or "ssh".
+https://glyph.twistedmatrix.com/2015/11/editor-malware.html
+
 ## How it works
 
 Plugins are defined in NeoBundle by calling `NeoBundle '<plugin repository

autoload/neobundle/types/git.vim

@@ -67,6 +67,13 @@ function! s:type.detect(path, opts) "{{{
           \ g:neobundle#types#git#default_protocol)
   endif
 
+  if protocol !=# 'https' && protocol !=# 'ssh'
+    call neobundle#util#print_error(
+          \ 'The protocol "' . protocol .
+          \ '"is invalid.  Please use https or ssh instead.')
+    return {}
+  endif
+
   if a:path !~ '/'
     " www.vim.org Vim scripts.
     let name = split(a:path, ':')[-1]
@@ -213,7 +220,7 @@ function! s:parse_other_pattern(protocol, path, opts) "{{{
     let uri =  (a:protocol ==# 'ssh') ?
           \ 'git@gist.github.com:' . split(name, '/')[-1] :
           \ a:protocol . '://gist.github.com/'. split(name, '/')[-1]
-  elseif a:path =~# '\<\%(git@\|git://\)\S\+'
+  elseif a:path =~# '\<git@\S\+'
         \ || a:path =~# '\.git\s*$'
         \ || get(a:opts, 'type', '') ==# 'git'
     if a:path =~# '\<\%(bb\|bitbucket\):\S\+'

autoload/neobundle/types/hg.vim

@@ -58,15 +58,21 @@ function! s:type.detect(path, opts) "{{{
           \ g:neobundle#types#hg#default_protocol)
   endif
 
+  if protocol !=# 'https' && protocol !=# 'ssh'
+    call neobundle#util#print_error(
+          \ 'The protocol "' . protocol .
+          \ '"is invalid.  Please use https or ssh instead.')
+    return {}
+  endif
+
   if a:path =~# '\<\%(bb\|bitbucket\):'
     let name = substitute(split(a:path, ':')[-1],
           \   '^//bitbucket.org/', '', '')
     let uri = (protocol ==# 'ssh') ?
           \ 'ssh://hg@bitbucket.org/' . name :
           \ protocol . '://bitbucket.org/' . name
   elseif a:path =~? '[/.]hg[/.@]'
-          \ || (a:path =~# '\<https\?://bitbucket\.org/'
-          \ || a:path =~# '\<https://code\.google\.com/'
+          \ || (a:path =~# '\<https://bitbucket\.org/'
           \ || get(a:opts, 'type', '') ==# 'hg')
     let uri = a:path
   else

autoload/neobundle/types/raw.vim

@@ -46,14 +46,14 @@ function! s:type.detect(path, opts) "{{{
   let type = ''
   let name = ''
 
-  if a:path =~# '^https\?:.*\.vim$'
-    " HTTP/HTTPS
+  if a:path =~# '^https:.*\.vim$'
+    " HTTPS
 
     let name = neobundle#util#name_conversion(a:path)
 
     let type = 'raw'
   elseif a:path =~#
-        \ '^https\?://www\.vim\.org/scripts/download_script.php?src_id=\d\+$'
+        \ '^https://www\.vim\.org/scripts/download_script.php?src_id=\d\+$'
     " For www.vim.org
     let name = 'vim-scripts-' . matchstr(a:path, '\d\+$')
     let type = 'raw'

autoload/neobundle/types/svn.vim

@@ -48,11 +48,12 @@ function! s:type.detect(path, opts) "{{{
   let name = ''
   let uri = ''
 
-  if a:path =~# '\<\%(file\|https\?\|svn\)://'
-        \ && a:path =~? '[/.]svn[/.]'
+  if (a:path =~# '\<\%(file\|https\)://'
+        \ && a:path =~? '[/.]svn[/.]')
+        \ || a:path =~# '\<svn+ssh://'
     let uri = a:path
     let type = 'svn'
-  elseif a:path =~# '\<\%(gh\|github\):\S\+\|://github.com/'
+  elseif a:path =~# '\<\%(gh\|github\):\S\+\|https://github.com/'
     let name = substitute(split(a:path, ':')[-1],
           \   '^//github.com/', '', '')
     let uri =  'https://github.com/'. name

autoload/neobundle/types/vba.vim

@@ -46,10 +46,11 @@ function! s:type.detect(path, opts) "{{{
   let type = ''
   let name = ''
 
-  if a:path =~# '^https\?:.*\.vba\(\.gz\)\?$'
-    " HTTP / HTTPS
+  if a:path =~# '^https:.*\.vba\(\.gz\)\?$'
+    " HTTPS
     " .*.vba / .*.vba.gz
-    let name = fnamemodify(split(a:path, ':')[-1], ':s?/$??:t:s?\c\.vba\(\.gz\)*\s*$??')
+    let name = fnamemodify(split(a:path, ':')[-1],
+          \ ':s?/$??:t:s?\c\.vba\(\.gz\)*\s*$??')
     let type = 'vba'
   endif