bugGNU Wget - Bugs: bug #51964, wget webpage contains many...

 
 

bug #51964: wget webpage contains many insecure HTTP links

Submitter:  Hanno Boeck <hanno>
Submitted:  Fri 08 Sep 2017 12:04:02 PM UTC
   
 
Category:  Web Site Severity:  3 - Normal
Priority:  5 - Normal Status:  Fixed
Privacy:  Public Assigned to:  rockdaboot
Originator Name:  Open/Closed:  Closed
Release:  None Operating System:  None
Reproducibility:  None Fixed Release:  None
Planned Release:  None Regression:  None
Work Required:  None Patch Included:  None
* Mandatory Fields

Add a New Comment Rich Markup
   

Fri 15 Sep 2017 10:31:03 AM UTC, comment #2: 

Remove / Cleaned up the project we page.

There are still HTTP references coming from included templates.
For these I opened a bug report at Savannah administration, see https://savannah.gnu.org/task/index.php?14630

Thanks for reporting :-)

Tim Ruehsen <rockdaboot>
Group administrator
Fri 08 Sep 2017 07:56:51 PM UTC, comment #1: 

Thanks, just looking at it... we (project maintainers) can only change a certain part of the web page (I am at it).

And it means we have to replace wget.addictivecode.org, since it offers no HTTPS and no one here has write access to it. But hey, that is what Wget has been made for ;-)

Tim Ruehsen <rockdaboot>
Group administrator
Fri 08 Sep 2017 12:04:02 PM UTC, original submission:  

The GNU wget page contains lots of links that are HTTP. Many of them are available over HTTPS and should be changed. Some of them come from the GNU template itself, but many are also wget specific.

Particularly the download links should default to a secure download location, right now only HTTP and FTP are offered.

The MoarTLS browser extension is a useful way of identifying insecure links.

Output:

18 of 46 links are non-secure.
http://www.fsf.org/fss
http://ftp.gnu.org/gnu/wget/
ftp://ftp.gnu.org/gnu/wget/
http://wget.addictivecode.org/Faq#download
http://wget.addictivecode.org/
http://wget.addictivecode.org/Faq
http://wget.addictivecode.org/HelpingWithWget
http://lists.gnu.org/mailman/listinfo/bug-wget
http://www.aoe.com/en
http://www.fsf.org/
http://directory.fsf.org/
http://www.fsf.org/
http://www.fsf.org/
http://shop.fsf.org/
http://donate.fsf.org/
http://flattr.com/thing/313733/gnuproject-on-Flattr
http://creativecommons.org/licenses/by-nd/4.0/
http://www.fsf.org/about/dmca-notice

Hanno Boeck <hanno>

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach Files:
   
   
Comment:
   

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -email is unavailable- added by rockdaboot (Posted a comment)
  • -email is unavailable- added by hanno (Submitted the item)
  •  

    Follow 3 latest changes.

    Date Changed by Updated Field Previous Value => Replaced by
    2017-09-15 rockdaboot StatusNone Fixed
        Open/ClosedOpen Closed
    2017-09-08 rockdaboot Assigned toNone rockdaboot

    Back to the top

    Powered by Savane 3.13-f8d8.
    Corresponding source code