search

madskristensen / WebEssentials2015

A Visual Studio extension for web developers
Other
300 stars 92 forks source link

Downloads that could be done over HTTPS are being done over HTTP #76

Closed sirsquidness closed 9 years ago

sirsquidness commented 9 years ago

Hi guys,

https://github.com/madskristensen/WebEssentials2015/blob/28fcaa6ee18b32262e3b86a5446fd546a8a50d4a/EditorExtensions/PreBuildTask.cs#L102

This is a resource that can be downloaded over HTTPS - ie, https://nodejs.org/dist/latest/node.exe.

Especially because this is an executable, this should be obtained over HTTPS. Using a HTTP resource should be a last resort for anything.