summarylogtreecommitdiffstats
diff options
context:
space:
mode:
authorfelics2019-03-20 12:16:46 +0100
committerfelics2019-03-20 12:16:46 +0100
commit9a148d6bdeef5659f660eb24ea0608bbaaa57206 (patch)
tree3c5a9941a50a7d22d2298f57a3e8f687a809be3e
parent7e272b800b5409661b1442b5e49e74a78b3f413d (diff)
downloadaur-9a148d6bdeef5659f660eb24ea0608bbaaa57206.tar.gz
Removed the --no-check-certificate when determining pkgver for security issues: pkgver parser may not be code injection safe.
-rw-r--r--.SRCINFO2
-rw-r--r--PKGBUILD5
2 files changed, 4 insertions, 3 deletions
diff --git a/.SRCINFO b/.SRCINFO
index 20c7fcb54d3f..ee7c23d30a01 100644
--- a/.SRCINFO
+++ b/.SRCINFO
@@ -1,7 +1,7 @@
pkgbase = idos-timetable-data-chaps-trains-europe-2019-latest
pkgdesc = 2018/2019 Timetable data for the timetable search engines by CHAPS: European trains.
pkgver = 2019_3_19
- pkgrel = 1
+ pkgrel = 2
epoch = 0
url = http://chaps.cz/eng/download/idos/zip#kotvatt
arch = any
diff --git a/PKGBUILD b/PKGBUILD
index d40ae3db48c8..32e590672280 100644
--- a/PKGBUILD
+++ b/PKGBUILD
@@ -9,7 +9,7 @@ _pkgname="idos-timetable-data-chaps-trains-europe-20${_year}"
pkgname="${_pkgname}-latest"
epoch=0
pkgver=2019_3_19
-pkgrel=1
+pkgrel=2
pkgdesc="20${_prevyear}/20${_year} Timetable data for the timetable search engines by CHAPS: European trains."
arch=(any)
url="http://chaps.cz/eng/download/idos/zip#kotvatt"
@@ -77,7 +77,8 @@ pkgver() {
# Do not use metadata of the source file, but do website parsing: So we do not need to download the file to (AUR-)update the package version with our own crude hacked script 'idos-aur-update-versions.sh'.
#date -r "${srcdir}/${_target}" +"%Y_%m_%d"
- wget --user-agent='' --dns-timeout=30 --connect-timeout=30 --read-timeout=30 --no-check-certificate -nv -O- "${url}" | tr -d '\a' | tr '\n' '\a' | sed 's|^.*File '"${_zipfile}"'\(.*\)Zip/'"${_zipfile}"'.*$|\1\n|g' | tr '\a' '\n' | grep 'Update date:' | cut -d, -f1 | sed -r 's|([0-9]+)\.([0-9]+)\.([0-9]+).|\n\3_\2_\1\n|g' | grep -E '^[0-9]+_[0-9]+_[0-9]+'
+ wget --user-agent='' --dns-timeout=30 --connect-timeout=30 --read-timeout=30 -nv -O- "${url}" | tr -d '\a' | tr '\n' '\a' | sed 's|^.*File '"${_zipfile}"'\(.*\)Zip/'"${_zipfile}"'.*$|\1\n|g' | tr '\a' '\n' | grep 'Update date:' | cut -d, -f1 | sed -r 's|([0-9]+)\.([0-9]+)\.([0-9]+).|\n\3_\2_\1\n|g' | grep -E '^[0-9]+_[0-9]+_[0-9]+'
+ # wget --user-agent='' --dns-timeout=30 --connect-timeout=30 --read-timeout=30 --no-check-certificate -nv -O- "${url}" | tr -d '\a' | tr '\n' '\a' | sed 's|^.*File '"${_zipfile}"'\(.*\)Zip/'"${_zipfile}"'.*$|\1\n|g' | tr '\a' '\n' | grep 'Update date:' | cut -d, -f1 | sed -r 's|([0-9]+)\.([0-9]+)\.([0-9]+).|\n\3_\2_\1\n|g' | grep -E '^[0-9]+_[0-9]+_[0-9]+'
}
package() {