Skip to content

Commit 2cc7ea7

Browse files
sunny-seclaude
andauthored
fix(security): use HTTPS for CLI binary download URL (#12)
F-001 / DEVA11Y-473 — The default download URL used plaintext HTTP (CWE-319), allowing MitM to substitute a malicious binary. Switch to HTTPS to enforce TLS. Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
1 parent 0428b32 commit 2cc7ea7

1 file changed

Lines changed: 1 addition & 1 deletion

File tree

Plugins/BrowserStackAccessibilityLint/BrowserStackAccessibilityLint.swift

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -339,7 +339,7 @@ private struct BrowserStackCLIDownloader {
339339
private func defaultDownloadURL() throws -> URL {
340340
let os = try currentOSName()
341341
let arch = try currentArchName()
342-
guard let url = URL(string: "http://api.browserstack.com/sdk/v1/download_cli?os=\(os)&os_arch=\(arch)") else {
342+
guard let url = URL(string: "https://api.browserstack.com/sdk/v1/download_cli?os=\(os)&os_arch=\(arch)") else {
343343
throw PluginError("Failed to create download URL for \(os) \(arch).")
344344
}
345345
return url

0 commit comments

Comments
 (0)