Skip to content
Snippets Groups Projects
  1. Dec 01, 2015
  2. Nov 30, 2015
  3. Nov 29, 2015
  4. Nov 28, 2015
    • Robin Appelman's avatar
      cache resized avatars · 6b7e7482
      Robin Appelman authored
      6b7e7482
    • Lukas Reschke's avatar
      Don't trust update server · f3e91068
      Lukas Reschke authored
      In case the update server may deliver malicious content this would allow an adversary to inject arbitrary HTML into the response. So very bad stuff.
      
      While signing the response would be better and something we can also do in the future (considering the code signing work), this is already a good first start.
      f3e91068
  5. Nov 27, 2015
  6. Nov 26, 2015
  7. Nov 25, 2015
  8. Nov 24, 2015
  9. Nov 23, 2015
Loading