← Back to branch summary

~stuart-morgan/sparkle/loc-link-fix

« back to all changes in this revision

Viewing changes to SUBasicUpdateDriver.m

  • Committer: Andy Matuschak
  • Date: 2009-01-06 07:11:26 UTC
  • Revision ID: andy@andymatuschak.org-20090106071126-lu8iawmzktr8imk0
Fixing Bug #300053: "Disable signature requirement when appcast and update archive URLs are local"

Show diffs side-by-side

added added

removed removed

Lines of Context:
SUBasicUpdateDriver.m
160
160
{
161
161
        // New in Sparkle 1.5: we're now checking signatures on all non-secure downloads, where "secure" is defined as both the appcast and the download being transmitted over SSL.
162
162
        NSURL *downloadURL = [[d request] URL];
163
 
        if (![[downloadURL scheme] isEqualToString:@"https"] || ![[appcastURL scheme] isEqualToString:@"https"] || [host publicDSAKey])
 
163
        if (!([[downloadURL scheme] isEqualToString:@"https"] && [[appcastURL scheme] isEqualToString:@"https"]) || !([downloadURL isFileURL] && [appcastURL isFileURL]) || [host publicDSAKey])
164
164
        {
165
165
                if (![SUDSAVerifier validatePath:downloadPath withEncodedDSASignature:[updateItem DSASignature] withPublicDSAKey:[host publicDSAKey]])
166
166
                {