Received: by 2002:a25:e74b:0:0:0:0:0 with SMTP id e72csp1634204ybh; Mon, 20 Jul 2020 03:25:50 -0700 (PDT) X-Google-Smtp-Source: ABdhPJwRj340JWluUKoLt4Y/A6Ho+2sE1xy7BUi8lShSnawcDz4JaMw8TO5PJci7emhdLSIljqKl X-Received: by 2002:a17:906:414c:: with SMTP id l12mr21025361ejk.417.1595240750611; Mon, 20 Jul 2020 03:25:50 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1595240750; cv=none; d=google.com; s=arc-20160816; b=U0WjbTCviLHpaJd8N3HRoLeA5EPqAhUVfjw4LTk4DkrL70i9Q2n0QziK1+a8UgZ3Z9 ScfGcUoDzjorwBMgk39XbzSrQ1rdrnyBQfAXOH3WZyRMAckrEdORjiR0K0vGioF1TJhq 6hFWscSy3bfkl3GoBM7VQ7phrmr+aymAs3LiAJnFv9ihEMYqAoteHOZ5mYLtf6G37vNM jWR7PNkGdcjVVblJMO91JvKmtpgJU9gRtPuBRcqRo81Q2WKone3fIx1UaXyt1ctREg8O GWtMK/v/nLEy6LuHjakKZN1P/6H7Cb99TkqTiLEZzc+UKss61soceMt/c1UFWJ2vfmrg IioA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:sender:mime-version:user-agent:references :message-id:in-reply-to:subject:cc:to:from:date:dkim-signature; bh=jIbkPpGSvQ4GBkNbEzTT5vpY5M2viOw+ol25ntZdV2o=; b=orjkUedWkIHG2FcsYMSYcrbSKMG1ug+w0R5ZFlaWEn1MB0blpCkXHMqlDdAfqhIaQU q6GsxGGLWRjj4PDmIRQO4LAPV8il2eNfLQv6w9ookpCnQX9M3J88jLdKknys7KoyzeOZ XfYpAO15gND+EmuvVY+R2yeluIdetClIHK4UIWeYQqoi0Aw8d2DJeCrJWknu5GuaFYQE 5Gind6Mt9m30WTxx0CqShEa9dJ1AYvcT22bZkM1AuKkEur5NGQKNQrA2++94ijGHfanQ MQR4FyyhW7Qqb6US2pT9SJINuN23yXBUe9rhr3HQzFYrJAd2PPDU0BjfQWNnyrGRpTJD i9/g== ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@kernel.org header.s=default header.b="l67PkE/R"; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=kernel.org Return-Path: Received: from vger.kernel.org (vger.kernel.org. [23.128.96.18]) by mx.google.com with ESMTP id o13si10708670edq.133.2020.07.20.03.25.26; Mon, 20 Jul 2020 03:25:50 -0700 (PDT) Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) client-ip=23.128.96.18; Authentication-Results: mx.google.com; dkim=pass header.i=@kernel.org header.s=default header.b="l67PkE/R"; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=kernel.org Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1728354AbgGTKZM (ORCPT + 99 others); Mon, 20 Jul 2020 06:25:12 -0400 Received: from mail.kernel.org ([198.145.29.99]:32832 "EHLO mail.kernel.org" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1728001AbgGTKZM (ORCPT ); Mon, 20 Jul 2020 06:25:12 -0400 Received: from pobox.suse.cz (nat1.prg.suse.com [195.250.132.148]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mail.kernel.org (Postfix) with ESMTPSA id 2271720773; Mon, 20 Jul 2020 10:25:09 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=kernel.org; s=default; t=1595240711; bh=0yBRtrgV0oqduFYbAUYHsxtbhEuVwVxiP2Pd1Cr8R58=; h=Date:From:To:cc:Subject:In-Reply-To:References:From; b=l67PkE/RzLWY5IkeqGPvMecT7x4zFXpW12kIP45RZ86WvEb1Sn2xYUErgiyS7zR9z iM2UJUxFBVI/8PD3ncVI0Mai9Pu8CnDc5m7WdPOC/BneNLu8+xOGjjEPpmJ4VYRApH 9NNGRJbatWfF0q4no1fNxX30JZtn0YsjBF4Qjuuc= Date: Mon, 20 Jul 2020 12:25:08 +0200 (CEST) From: Jiri Kosina To: Bastien Nocera cc: "Alexander A. Klimov" , benjamin.tissoires@redhat.com, mpe@ellerman.id.au, benh@kernel.crashing.org, paulus@samba.org, linux-input@vger.kernel.org, linuxppc-dev@lists.ozlabs.org, linux-kernel@vger.kernel.org Subject: Re: [PATCH] HID: udraw-ps3: Replace HTTP links with HTTPS ones In-Reply-To: Message-ID: References: <20200718103344.3407-1-grandmaster@al2klimov.de> User-Agent: Alpine 2.21 (LSU 202 2017-01-01) MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Sender: linux-kernel-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Sat, 18 Jul 2020, Bastien Nocera wrote: > > Rationale: > > Reduces attack surface on kernel devs opening the links for MITM > > as HTTPS traffic is much harder to manipulate. > > > > Deterministic algorithm: > > For each file: > > If not .svg: > > For each line: > > If doesn't contain `\bxmlns\b`: > > For each link, `\bhttp://[^# \t\r\n]*(?:\w|/)`: > > If neither `\bgnu\.org/license`, nor `\bmozilla\.org/MPL\b`: > > If both the HTTP and HTTPS versions > > return 200 OK and serve the same content: > > Replace HTTP with HTTPS. > > > > Signed-off-by: Alexander A. Klimov > > Looks good! > > Acked-by: Bastien Nocera Applied, thanks. -- Jiri Kosina SUSE Labs