This repository has been archived by the owner on Dec 29, 2022. It is now read-only.

It's highly insecure to download sauceconnect from HTTPS and then run it unconditionally #548

Closed

evilaliv3 opened this issue Jan 31, 2016 · 1 comment

Contributor

evilaliv3 commented Jan 31, 2016

Currently scripts/run-saucelabs.sh downloads sauce-connect via HTTP and then run it without any validation.

evilaliv3 added a commit to evilaliv3/tracing-framework that referenced this issue


          Fix issue google#548

322d859

benvanik added a commit that referenced this issue


          Merge pull request #549 from evilaliv3/issue/548

22761db

Fix issue #548

Contributor

benvanik commented Jan 31, 2016

👍

benvanik closed this as completed

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.