From: Michael Tremer <michael.tremer@ipfire.org>
Date: Tue, 27 Sep 2022 08:05:11 +0000 (+0000)
Subject: importer: Ensure that we only use HTTPS URLs for Geofeeds
X-Git-Tag: 0.9.17~29^2~1
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=d96702a294ef4c7ebad6564d21e44091eeb5f005;p=location%2Flibloc.git

importer: Ensure that we only use HTTPS URLs for Geofeeds

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
---

diff --git a/src/scripts/location-importer.in b/src/scripts/location-importer.in
index 0e2764e..d0384b5 100644
--- a/src/scripts/location-importer.in
+++ b/src/scripts/location-importer.in
@@ -894,6 +894,11 @@ class CLI(object):
 				# Update any geofeed information
 				geofeed = inetnum.get("geofeed", None)
 
+				# Make sure that this is a HTTPS URL
+				if geofeed and not geofeed.startswith("https://"):
+					log.warning("Geofeed URL is not using HTTPS: %s" % geofeed)
+					geofeed = None
+
 				# Store/update any geofeeds
 				if geofeed:
 					self.db.execute("""