diff options
| author | Donncha Ó Cearbhaill <donncha@donncha.is> | 2018-04-15 18:47:38 +0200 |
|---|---|---|
| committer | Marc Cornellà <marc.cornella@live.com> | 2018-04-15 18:47:38 +0200 |
| commit | 4fa4e5fe4ad356e1531bd60715b7e01f510ab083 (patch) | |
| tree | fc9f4bf3a80ca9d91635e5cbe8b8ee8f02de7a19 /README.md | |
| parent | ccd02866f67e704cd4844029c0f5787c0714e21c (diff) | |
| download | zsh-4fa4e5fe4ad356e1531bd60715b7e01f510ab083.tar.gz zsh-4fa4e5fe4ad356e1531bd60715b7e01f510ab083.tar.bz2 zsh-4fa4e5fe4ad356e1531bd60715b7e01f510ab083.zip | |
Use HTTPS for manual git clone to avoid MITM (#6043)
The git:// transport is completely unauthenticated. An attacker on the local or upstream network can easily man-in-the-middle an oh-my-zsh update and get remote code execution on your system. Only the https:// git transport should be used.
Diffstat (limited to 'README.md')
| -rw-r--r-- | README.md | 2 |
1 files changed, 1 insertions, 1 deletions
@@ -141,7 +141,7 @@ export ZSH="$HOME/.dotfiles/oh-my-zsh"; sh -c "$(curl -fsSL https://raw.githubus ##### 1. Clone the repository: ```shell -git clone git://github.com/robbyrussell/oh-my-zsh.git ~/.oh-my-zsh +git clone https://github.com/robbyrussell/oh-my-zsh.git ~/.oh-my-zsh ``` ##### 2. *Optionally*, backup your existing `~/.zshrc` file: |