Skip to content

Commit 5724af8

Browse files
committed
Make updater check interity & authenticity of server-returned XML (XMLDsig)
This security enhancement depends on notepad-plus-plus/wingup#102.
1 parent 6e5ea55 commit 5724af8

1 file changed

Lines changed: 9 additions & 0 deletions

File tree

PowerEditor/src/Parameters.cpp

Lines changed: 9 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -9972,6 +9972,15 @@ void NppParameters::buildGupParams(std::wstring& params) const
99729972

99739973
SecurityGuard sgd;
99749974

9975+
//
9976+
// Verify integrity & authenticiy of server-returned XML (XMLDsig)
9977+
//
9978+
9979+
params += L" -chkCert4InfoXML";
9980+
9981+
params += L" -chkCertKeyId4XML=";
9982+
params += sgd.signer_key_id();
9983+
99759984
//
99769985
// Verify integrity & authenticiy of the downloaded installer
99779986
//

0 commit comments

Comments
 (0)