oh-my-zsh

Cornelicorn/oh-my-zsh

Fork 0

mirror of https://github.com/robbyrussell/oh-my-zsh.git synced 2026-07-28 23:51:01 +02:00

Commit Graph

Author	SHA1	Message	Date
Donncha Ó CearbhaillandMarc Cornellà	4fa4e5fe4a	Use HTTPS for manual git clone to avoid MITM (#6043 ) The git:// transport is completely unauthenticated. An attacker on the local or upstream network can easily man-in-the-middle an oh-my-zsh update and get remote code execution on your system. Only the https:// git transport should be used.	2018-04-15 18:47:38 +02:00

Author

SHA1

Message

Date

Donncha Ó CearbhaillandMarc Cornellà

4fa4e5fe4a

Use HTTPS for manual git clone to avoid MITM (#6043 )

The git:// transport is completely unauthenticated. An attacker on the local or upstream network can easily man-in-the-middle an oh-my-zsh update and get remote code execution on your system. Only the https:// git transport should be used.

2018-04-15 18:47:38 +02:00