search

abarisain / dmix

A modern MPD Client for Android.
Apache License 2.0
591 stars 198 forks source link

insecure gradlew #857

Open IzzySoft opened 6 years ago

IzzySoft commented 6 years ago

Please note that lint reports an "insecure gradlew" which you probably want to fix:

Found plain HTTP URL for gradle repository:
build/com.namelessdev.mpdroid/MPDroid/build.gradle
repositories {
        maven { url 'http://download.crashlytics.com/maven' }
Found plain HTTP URL for gradle repository:
build/com.namelessdev.mpdroid/MPDroid/build.gradle
repositories {
    mavenCentral()
    maven { url 'http://download.crashlytics.com/maven' }
gradle build uses plain HTTP URLs for repositories!  This is insecure!
https://max.computer/blog/how-to-take-over-the-computer-of-any-java-or-clojure-or-scala-developer/

Thanks!