Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix for potentially insecure usage of the NSURLSession API #1158

Merged
merged 1 commit into from
Aug 5, 2021

Conversation

maratal
Copy link
Collaborator

@maratal maratal commented Jul 29, 2021

This finally fixes SocketRocket portion of NSURLSession API insecure usage, which was originally fixed here ably-forks/SocketRocket#7, but then messed up with #1090

@maratal
Copy link
Collaborator Author

maratal commented Jul 29, 2021

FYI @QuintinWillison

@maratal maratal linked an issue Jul 29, 2021 that may be closed by this pull request
Copy link
Contributor

@QuintinWillison QuintinWillison left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks sensible to me, though I'll admit I've not spent the time to look up each API individually to validate their use based on the @available conditions.

@QuintinWillison QuintinWillison merged commit 0a81834 into main Aug 5, 2021
@QuintinWillison QuintinWillison deleted the fix/1079-2 branch August 5, 2021 10:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Development

Successfully merging this pull request may close these issues.

Potentially insecure usage of the NSURLSession API
3 participants