* [PATCH] Replace HTTP links with HTTPS ones: vsprintf
@ 2020-07-02 20:05 Alexander A. Klimov
2020-07-03 7:08 ` Petr Mladek
2020-07-03 10:23 ` Sergey Senozhatsky
0 siblings, 2 replies; 4+ messages in thread
From: Alexander A. Klimov @ 2020-07-02 20:05 UTC (permalink / raw)
To: pmladek, rostedt, sergey.senozhatsky, andriy.shevchenko, linux,
corbet, linux-doc, linux-kernel
Cc: Alexander A. Klimov
Rationale:
Reduces attack surface on kernel devs opening the links for MITM
as HTTPS traffic is much harder to manipulate.
Deterministic algorithm:
For each file:
If not .svg:
For each line:
If doesn't contain `\bxmlns\b`:
For each link, `\bhttp://[^# \t\r\n]*(?:\w|/)`:
If both the HTTP and HTTPS versions
return 200 OK and serve the same content:
Replace HTTP with HTTPS.
Signed-off-by: Alexander A. Klimov <grandmaster@al2klimov.de>
---
Continuing my work started at 93431e0607e5.
If there are any URLs to be removed completely or at least not HTTPSified:
Just clearly say so and I'll *undo my change*.
See also https://lkml.org/lkml/2020/6/27/64
If there are any valid, but yet not changed URLs:
See https://lkml.org/lkml/2020/6/26/837
Documentation/core-api/printk-formats.rst | 4 ++--
lib/vsprintf.c | 2 +-
2 files changed, 3 insertions(+), 3 deletions(-)
diff --git a/Documentation/core-api/printk-formats.rst b/Documentation/core-api/printk-formats.rst
index 8c9aba262b1e..1beac4719e43 100644
--- a/Documentation/core-api/printk-formats.rst
+++ b/Documentation/core-api/printk-formats.rst
@@ -317,7 +317,7 @@ colon-separators. Leading zeros are always used.
The additional ``c`` specifier can be used with the ``I`` specifier to
print a compressed IPv6 address as described by
-http://tools.ietf.org/html/rfc5952
+https://tools.ietf.org/html/rfc5952
Passed by reference.
@@ -341,7 +341,7 @@ The additional ``p``, ``f``, and ``s`` specifiers are used to specify port
flowinfo a ``/`` and scope a ``%``, each followed by the actual value.
In case of an IPv6 address the compressed IPv6 address as described by
-http://tools.ietf.org/html/rfc5952 is being used if the additional
+https://tools.ietf.org/html/rfc5952 is being used if the additional
specifier ``c`` is given. The IPv6 address is surrounded by ``[``, ``]`` in
case of additional specifiers ``p``, ``f`` or ``s`` as suggested by
https://tools.ietf.org/html/draft-ietf-6man-text-addr-representation-07
diff --git a/lib/vsprintf.c b/lib/vsprintf.c
index 259e55895933..31a674dd2674 100644
--- a/lib/vsprintf.c
+++ b/lib/vsprintf.c
@@ -2134,7 +2134,7 @@ char *fwnode_string(char *buf, char *end, struct fwnode_handle *fwnode,
* [4] or [6] and is able to print port [p], flowinfo [f], scope [s]
* - '[Ii][4S][hnbl]' IPv4 addresses in host, network, big or little endian order
* - 'I[6S]c' for IPv6 addresses printed as specified by
- * http://tools.ietf.org/html/rfc5952
+ * https://tools.ietf.org/html/rfc5952
* - 'E[achnops]' For an escaped buffer, where rules are defined by combination
* of the following flags (see string_escape_mem() for the
* details):
--
2.27.0
^ permalink raw reply related [flat|nested] 4+ messages in thread
* Re: [PATCH] Replace HTTP links with HTTPS ones: vsprintf
2020-07-02 20:05 [PATCH] Replace HTTP links with HTTPS ones: vsprintf Alexander A. Klimov
@ 2020-07-03 7:08 ` Petr Mladek
2020-07-03 10:23 ` Sergey Senozhatsky
1 sibling, 0 replies; 4+ messages in thread
From: Petr Mladek @ 2020-07-03 7:08 UTC (permalink / raw)
To: Alexander A. Klimov
Cc: rostedt, sergey.senozhatsky, andriy.shevchenko, linux, corbet,
linux-doc, linux-kernel
On Thu 2020-07-02 22:05:36, Alexander A. Klimov wrote:
> Rationale:
> Reduces attack surface on kernel devs opening the links for MITM
> as HTTPS traffic is much harder to manipulate.
>
> Deterministic algorithm:
> For each file:
> If not .svg:
> For each line:
> If doesn't contain `\bxmlns\b`:
> For each link, `\bhttp://[^# \t\r\n]*(?:\w|/)`:
> If both the HTTP and HTTPS versions
> return 200 OK and serve the same content:
> Replace HTTP with HTTPS.
>
> Signed-off-by: Alexander A. Klimov <grandmaster@al2klimov.de>
Reviewed-by: Petr Mladek <pmladek@suse.com>
I am going to push this into printk/linux.git the following week
unless there are any complains.
Best Regards,
Petr
^ permalink raw reply [flat|nested] 4+ messages in thread
* Re: [PATCH] Replace HTTP links with HTTPS ones: vsprintf
2020-07-02 20:05 [PATCH] Replace HTTP links with HTTPS ones: vsprintf Alexander A. Klimov
2020-07-03 7:08 ` Petr Mladek
@ 2020-07-03 10:23 ` Sergey Senozhatsky
2020-07-03 12:38 ` Petr Mladek
1 sibling, 1 reply; 4+ messages in thread
From: Sergey Senozhatsky @ 2020-07-03 10:23 UTC (permalink / raw)
To: Alexander A. Klimov
Cc: pmladek, rostedt, sergey.senozhatsky, andriy.shevchenko, linux,
corbet, linux-doc, linux-kernel
On (20/07/02 22:05), Alexander A. Klimov wrote:
> Rationale:
> Reduces attack surface on kernel devs opening the links for MITM
> as HTTPS traffic is much harder to manipulate.
>
> Deterministic algorithm:
> For each file:
> If not .svg:
> For each line:
> If doesn't contain `\bxmlns\b`:
> For each link, `\bhttp://[^# \t\r\n]*(?:\w|/)`:
> If both the HTTP and HTTPS versions
> return 200 OK and serve the same content:
> Replace HTTP with HTTPS.
>
> Signed-off-by: Alexander A. Klimov <grandmaster@al2klimov.de>
Reviewed-by: Sergey Senozhatsky <sergey.senozhatsky@gmail.com>
-ss
^ permalink raw reply [flat|nested] 4+ messages in thread
* Re: [PATCH] Replace HTTP links with HTTPS ones: vsprintf
2020-07-03 10:23 ` Sergey Senozhatsky
@ 2020-07-03 12:38 ` Petr Mladek
0 siblings, 0 replies; 4+ messages in thread
From: Petr Mladek @ 2020-07-03 12:38 UTC (permalink / raw)
To: Sergey Senozhatsky
Cc: Alexander A. Klimov, rostedt, andriy.shevchenko, linux, corbet,
linux-doc, linux-kernel
On Fri 2020-07-03 19:23:36, Sergey Senozhatsky wrote:
> On (20/07/02 22:05), Alexander A. Klimov wrote:
> > Rationale:
> > Reduces attack surface on kernel devs opening the links for MITM
> > as HTTPS traffic is much harder to manipulate.
> >
> > Deterministic algorithm:
> > For each file:
> > If not .svg:
> > For each line:
> > If doesn't contain `\bxmlns\b`:
> > For each link, `\bhttp://[^# \t\r\n]*(?:\w|/)`:
> > If both the HTTP and HTTPS versions
> > return 200 OK and serve the same content:
> > Replace HTTP with HTTPS.
> >
> > Signed-off-by: Alexander A. Klimov <grandmaster@al2klimov.de>
>
> Reviewed-by: Sergey Senozhatsky <sergey.senozhatsky@gmail.com>
The patch is committed in printk/linux.git, branch for-5.9.
Best Regards,
Petr
^ permalink raw reply [flat|nested] 4+ messages in thread
end of thread, other threads:[~2020-07-03 12:38 UTC | newest]
Thread overview: 4+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2020-07-02 20:05 [PATCH] Replace HTTP links with HTTPS ones: vsprintf Alexander A. Klimov
2020-07-03 7:08 ` Petr Mladek
2020-07-03 10:23 ` Sergey Senozhatsky
2020-07-03 12:38 ` Petr Mladek
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).