importer: Ensure that we only use HTTPS URLs for Geofeeds

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

diff --git a/src/scripts/location-importer.in b/src/scripts/location-importer.in
index 0e2764e6d0a8bbea46dacb82cda4f9a058a7da40..d0384b5b6781ba27c8bd9ba2855abb661bc2811e 100644 (file)
--- a/src/scripts/location-importer.in
+++ b/src/scripts/location-importer.in
@@ -894,6 +894,11 @@ class CLI(object):
                                # Update any geofeed information
                                geofeed = inetnum.get("geofeed", None)
 
+                               # Make sure that this is a HTTPS URL
+                               if geofeed and not geofeed.startswith("https://"):
+                                       log.warning("Geofeed URL is not using HTTPS: %s" % geofeed)
+                                       geofeed = None
+
                                # Store/update any geofeeds
                                if geofeed:
                                        self.db.execute("""