WordPoints / wordpoints

Points plugin for WordPress
GNU General Public License v2.0
19 stars 15 forks source link

Extensions: require all updates to be digitally signed #747

Open JDGrimes opened 6 years ago

JDGrimes commented 6 years ago

This is a follow up to https://github.com/WordPoints/wordpoints/issues/746#issuecomment-342980134. We currently support extension server APIs that require extension signature verification, but if one doesn't, or there isn't a public key for a server, we just give a warning and proceed. We should change this to abort the update in these cases instead.