Skip to content

Commit 6f87bb7

Browse files
committed
Make updater check interity & authenticity of server-returned XML (XMLDsig)
This security enhancement depends on notepad-plus-plus/wingup#102. Close notepad-plus-plus#17441
1 parent a43f72a commit 6f87bb7

1 file changed

Lines changed: 9 additions & 0 deletions

File tree

PowerEditor/src/Parameters.cpp

Lines changed: 9 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -9929,6 +9929,15 @@ void NppParameters::buildGupParams(std::wstring& params)
99299929

99309930
SecurityGuard sgd;
99319931

9932+
//
9933+
// Verify integrity & authenticiy of server-returned XML (XMLDsig)
9934+
//
9935+
9936+
params += L" -chkCert4InfoXML";
9937+
9938+
params += L" -chkCertKeyId4XML=";
9939+
params += sgd.signer_key_id();
9940+
99329941
//
99339942
// Verify integrity & authenticiy of the downloaded installer
99349943
//

0 commit comments

Comments
 (0)