Received: by 2002:a05:6902:102b:0:0:0:0 with SMTP id x11csp768629ybt; Wed, 8 Jul 2020 11:09:36 -0700 (PDT) X-Google-Smtp-Source: ABdhPJwSD5TDAy9jMVAwa5KB0k3j09HEY5s2cyosAGl1+xb9szVHbyNJHgNB8xSEC8SQGanBjdsV X-Received: by 2002:a17:906:19c9:: with SMTP id h9mr50801245ejd.526.1594231776796; Wed, 08 Jul 2020 11:09:36 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1594231776; cv=none; d=google.com; s=arc-20160816; b=mHSjqF8ZFO7KZbVNxQpO8MhXdk5hUgrHgp6yZjvAfQ4kY1HQ0visMKTLz6cu/DdNcq IZj2Fs6pN63q4/sB4kqhRSfJ6MEVNvwcPUNwfqEbjpPp6E0pA0lvBAUMBcwdiiLhbpFB zisGg6DMz839N0HyV+7tgbCmqSpONj3/ppJ6nUB1HkwL6lVCY61wMsUMftaISHe37snc qPe0oRX7mfbLeaZTUVaU3VLA+J8btWE+HZZqD5ieN2ztx8Gka8RYB+CncxCIsgDXDCB3 3q/p41s1aY24iOQGH4vE61wIb0fwxJeZsm0cUSww4yqNGaU1yj239gXKC0AjN3gWDcpy 6NwA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:sender:mime-version:user-agent:message-id :in-reply-to:date:references:organization:subject:cc:to:from; bh=kwC/sYaIEMiz/xhIU3ZsjwdGrmA50WK86q7eB00/pgY=; b=hvp1qDboZeO8c2Fixu5y7G/pKIXkjfDk6goVVHlrzySda3qXkJdYrtf4EYwG1jNirs dte8EdBGba+hkH40Pj1D+sUTUjG2yvqNj6sdlSrJ0yLWmkX2HaZLnaD85YzES+wT/Wr/ WPPclu1xWQYXMsD+8C2FepxWIu9pli9TPHkSf//WJ6YjmobjwAc15vg1Q3Qpm/fgfudl TTpDwPB8YntjM1kJLoDFx4qvP1Xx7jTivfPTAkor2zOCpsRK55XkwLpzk1RUcJUquIXq axuy5GnVDmCj+KI0y8r4yFW8/RnbvC3x35wAgaWbE1i9bW4tC5FmbuvHFFW5nhFzL74p dPYg== ARC-Authentication-Results: i=1; mx.google.com; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=collabora.com Return-Path: Received: from vger.kernel.org (vger.kernel.org. [23.128.96.18]) by mx.google.com with ESMTP id c5si471148edy.429.2020.07.08.11.09.12; Wed, 08 Jul 2020 11:09:36 -0700 (PDT) Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) client-ip=23.128.96.18; Authentication-Results: mx.google.com; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=collabora.com Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1726319AbgGHSIM (ORCPT + 99 others); Wed, 8 Jul 2020 14:08:12 -0400 Received: from lindbergh.monkeyblade.net ([23.128.96.19]:55928 "EHLO lindbergh.monkeyblade.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1725978AbgGHSIM (ORCPT ); Wed, 8 Jul 2020 14:08:12 -0400 Received: from bhuna.collabora.co.uk (bhuna.collabora.co.uk [IPv6:2a00:1098:0:82:1000:25:2eeb:e3e3]) by lindbergh.monkeyblade.net (Postfix) with ESMTPS id 52524C061A0B; Wed, 8 Jul 2020 11:08:12 -0700 (PDT) Received: from [127.0.0.1] (localhost [127.0.0.1]) (Authenticated sender: krisman) with ESMTPSA id C9D962A2050 From: Gabriel Krisman Bertazi To: "Alexander A. Klimov" Cc: linux-fsdevel@vger.kernel.org, linux-kernel@vger.kernel.org Subject: Re: [PATCH] Replace HTTP links with HTTPS ones: UNICODE SUBSYSTEM Organization: Collabora References: <20200708155831.15102-1-grandmaster@al2klimov.de> Date: Wed, 08 Jul 2020 14:08:05 -0400 In-Reply-To: <20200708155831.15102-1-grandmaster@al2klimov.de> (Alexander A. Klimov's message of "Wed, 8 Jul 2020 17:58:31 +0200") Message-ID: <873661nam2.fsf@collabora.com> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/26.3 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain Sender: linux-kernel-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org "Alexander A. Klimov" writes: > Rationale: > Reduces attack surface on kernel devs opening the links for MITM > as HTTPS traffic is much harder to manipulate. > > Deterministic algorithm: > For each file: > If not .svg: > For each line: > If doesn't contain `\bxmlns\b`: > For each link, `\bhttp://[^# \t\r\n]*(?:\w|/)`: > If neither `\bgnu\.org/license`, nor `\bmozilla\.org/MPL\b`: > If both the HTTP and HTTPS versions > return 200 OK and serve the same content: > Replace HTTP with HTTPS. > > Signed-off-by: Alexander A. Klimov Applied, with a fix to the summary line, to match unicode contributions. Thanks, -- Gabriel Krisman Bertazi