Skip to content
This repository has been archived by the owner on Aug 11, 2021. It is now read-only.

fix insecure install #266

Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

fix insecure install #266

wants to merge 1 commit into from

Commits on Mar 30, 2017

  1. fix insecure install 

    The [documentation](https://github.com/npm/npm-registry-couchapp/blob/master/www/attachments/install.html#L3) mentions a one line install ```curl http://npmjs.org/install.sh | sh```. It may be safer to download via the HTTPS protocol, since http enables main-in-the-middle-attack, and if succeed in this case, it becomes arbitrary execution attack.
    @JacksonGL
    JacksonGL authored Mar 30, 2017
    Configuration menu
    Copy the full SHA
    bfc150b View commit details
    Browse the repository at this point in the history