Replace HTTP links with HTTPS ones: IPv*
Rationale: Reduces attack surface on kernel devs opening the links for MITM as HTTPS traffic is much harder to manipulate. Deterministic algorithm: For each file: If not .svg: For each line: If doesn't contain `\bxmlns\b`: For each link, `\bhttp://[^# \t\r\n]*(?:\w|/)`: If both the HTTP and HTTPS versions return 200 OK and serve the same content: Replace HTTP with HTTPS. Signed-off-by: Alexander A. Klimov <grandmaster@al2klimov.de> Signed-off-by: David S. Miller <davem@davemloft.net>
This commit is contained in:
parent
1eafa7369f
commit
7a6498ebcd
|
@ -10,7 +10,7 @@ config IP_MULTICAST
|
||||||
intend to participate in the MBONE, a high bandwidth network on top
|
intend to participate in the MBONE, a high bandwidth network on top
|
||||||
of the Internet which carries audio and video broadcasts. More
|
of the Internet which carries audio and video broadcasts. More
|
||||||
information about the MBONE is on the WWW at
|
information about the MBONE is on the WWW at
|
||||||
<http://www.savetz.com/mbone/>. For most people, it's safe to say N.
|
<https://www.savetz.com/mbone/>. For most people, it's safe to say N.
|
||||||
|
|
||||||
config IP_ADVANCED_ROUTER
|
config IP_ADVANCED_ROUTER
|
||||||
bool "IP: advanced router"
|
bool "IP: advanced router"
|
||||||
|
@ -73,7 +73,7 @@ config IP_MULTIPLE_TABLES
|
||||||
|
|
||||||
If you need more information, see the Linux Advanced
|
If you need more information, see the Linux Advanced
|
||||||
Routing and Traffic Control documentation at
|
Routing and Traffic Control documentation at
|
||||||
<http://lartc.org/howto/lartc.rpdb.html>
|
<https://lartc.org/howto/lartc.rpdb.html>
|
||||||
|
|
||||||
If unsure, say N.
|
If unsure, say N.
|
||||||
|
|
||||||
|
@ -280,7 +280,7 @@ config SYN_COOKIES
|
||||||
continue to connect, even when your machine is under attack. There
|
continue to connect, even when your machine is under attack. There
|
||||||
is no need for the legitimate users to change their TCP/IP software;
|
is no need for the legitimate users to change their TCP/IP software;
|
||||||
SYN cookies work transparently to them. For technical information
|
SYN cookies work transparently to them. For technical information
|
||||||
about SYN cookies, check out <http://cr.yp.to/syncookies.html>.
|
about SYN cookies, check out <https://cr.yp.to/syncookies.html>.
|
||||||
|
|
||||||
If you are SYN flooded, the source address reported by the kernel is
|
If you are SYN flooded, the source address reported by the kernel is
|
||||||
likely to have been forged by the attacker; it is only reported as
|
likely to have been forged by the attacker; it is only reported as
|
||||||
|
@ -525,7 +525,7 @@ config TCP_CONG_HSTCP
|
||||||
A modification to TCP's congestion control mechanism for use
|
A modification to TCP's congestion control mechanism for use
|
||||||
with large congestion windows. A table indicates how much to
|
with large congestion windows. A table indicates how much to
|
||||||
increase the congestion window by when an ACK is received.
|
increase the congestion window by when an ACK is received.
|
||||||
For more detail see http://www.icir.org/floyd/hstcp.html
|
For more detail see https://www.icir.org/floyd/hstcp.html
|
||||||
|
|
||||||
config TCP_CONG_HYBLA
|
config TCP_CONG_HYBLA
|
||||||
tristate "TCP-Hybla congestion control algorithm"
|
tristate "TCP-Hybla congestion control algorithm"
|
||||||
|
|
|
@ -10,9 +10,9 @@
|
||||||
*
|
*
|
||||||
* The CIPSO draft specification can be found in the kernel's Documentation
|
* The CIPSO draft specification can be found in the kernel's Documentation
|
||||||
* directory as well as the following URL:
|
* directory as well as the following URL:
|
||||||
* http://tools.ietf.org/id/draft-ietf-cipso-ipsecurity-01.txt
|
* https://tools.ietf.org/id/draft-ietf-cipso-ipsecurity-01.txt
|
||||||
* The FIPS-188 specification can be found at the following URL:
|
* The FIPS-188 specification can be found at the following URL:
|
||||||
* http://www.itl.nist.gov/fipspubs/fip188.htm
|
* https://www.itl.nist.gov/fipspubs/fip188.htm
|
||||||
*
|
*
|
||||||
* Author: Paul Moore <paul.moore@hp.com>
|
* Author: Paul Moore <paul.moore@hp.com>
|
||||||
*/
|
*/
|
||||||
|
|
|
@ -13,7 +13,7 @@
|
||||||
*
|
*
|
||||||
* An experimental study of compression methods for dynamic tries
|
* An experimental study of compression methods for dynamic tries
|
||||||
* Stefan Nilsson and Matti Tikkanen. Algorithmica, 33(1):19-33, 2002.
|
* Stefan Nilsson and Matti Tikkanen. Algorithmica, 33(1):19-33, 2002.
|
||||||
* http://www.csc.kth.se/~snilsson/software/dyntrie2/
|
* https://www.csc.kth.se/~snilsson/software/dyntrie2/
|
||||||
*
|
*
|
||||||
* IP-address lookup using LC-tries. Stefan Nilsson and Gunnar Karlsson
|
* IP-address lookup using LC-tries. Stefan Nilsson and Gunnar Karlsson
|
||||||
* IEEE Journal on Selected Areas in Communications, 17(6):1083-1092, June 1999
|
* IEEE Journal on Selected Areas in Communications, 17(6):1083-1092, June 1999
|
||||||
|
|
|
@ -3,7 +3,7 @@
|
||||||
* (C) 2003-2004 by Harald Welte <laforge@netfilter.org>
|
* (C) 2003-2004 by Harald Welte <laforge@netfilter.org>
|
||||||
* based on ideas of Fabio Olive Leite <olive@unixforge.org>
|
* based on ideas of Fabio Olive Leite <olive@unixforge.org>
|
||||||
*
|
*
|
||||||
* Development of this code funded by SuSE Linux AG, http://www.suse.com/
|
* Development of this code funded by SuSE Linux AG, https://www.suse.com/
|
||||||
*/
|
*/
|
||||||
#define pr_fmt(fmt) KBUILD_MODNAME ": " fmt
|
#define pr_fmt(fmt) KBUILD_MODNAME ": " fmt
|
||||||
#include <linux/module.h>
|
#include <linux/module.h>
|
||||||
|
|
|
@ -2,7 +2,7 @@
|
||||||
/*
|
/*
|
||||||
* Sally Floyd's High Speed TCP (RFC 3649) congestion control
|
* Sally Floyd's High Speed TCP (RFC 3649) congestion control
|
||||||
*
|
*
|
||||||
* See http://www.icir.org/floyd/hstcp.html
|
* See https://www.icir.org/floyd/hstcp.html
|
||||||
*
|
*
|
||||||
* John Heffner <jheffner@psc.edu>
|
* John Heffner <jheffner@psc.edu>
|
||||||
*/
|
*/
|
||||||
|
|
|
@ -4,7 +4,7 @@
|
||||||
* R.N.Shorten, D.J.Leith:
|
* R.N.Shorten, D.J.Leith:
|
||||||
* "H-TCP: TCP for high-speed and long-distance networks"
|
* "H-TCP: TCP for high-speed and long-distance networks"
|
||||||
* Proc. PFLDnet, Argonne, 2004.
|
* Proc. PFLDnet, Argonne, 2004.
|
||||||
* http://www.hamilton.ie/net/htcp3.pdf
|
* https://www.hamilton.ie/net/htcp3.pdf
|
||||||
*/
|
*/
|
||||||
|
|
||||||
#include <linux/mm.h>
|
#include <linux/mm.h>
|
||||||
|
|
|
@ -518,7 +518,7 @@ EXPORT_SYMBOL(tcp_initialize_rcv_mss);
|
||||||
*
|
*
|
||||||
* The algorithm for RTT estimation w/o timestamps is based on
|
* The algorithm for RTT estimation w/o timestamps is based on
|
||||||
* Dynamic Right-Sizing (DRS) by Wu Feng and Mike Fisk of LANL.
|
* Dynamic Right-Sizing (DRS) by Wu Feng and Mike Fisk of LANL.
|
||||||
* <http://public.lanl.gov/radiant/pubs.html#DRS>
|
* <https://public.lanl.gov/radiant/pubs.html#DRS>
|
||||||
*
|
*
|
||||||
* More detail on this code can be found at
|
* More detail on this code can be found at
|
||||||
* <http://staff.psc.edu/jheffner/>,
|
* <http://staff.psc.edu/jheffner/>,
|
||||||
|
|
|
@ -7,7 +7,7 @@
|
||||||
* "TCP Veno: TCP Enhancement for Transmission over Wireless Access Networks."
|
* "TCP Veno: TCP Enhancement for Transmission over Wireless Access Networks."
|
||||||
* IEEE Journal on Selected Areas in Communication,
|
* IEEE Journal on Selected Areas in Communication,
|
||||||
* Feb. 2003.
|
* Feb. 2003.
|
||||||
* See http://www.ie.cuhk.edu.hk/fileadmin/staff_upload/soung/Journal/J3.pdf
|
* See https://www.ie.cuhk.edu.hk/fileadmin/staff_upload/soung/Journal/J3.pdf
|
||||||
*/
|
*/
|
||||||
|
|
||||||
#include <linux/mm.h>
|
#include <linux/mm.h>
|
||||||
|
|
|
@ -14,7 +14,7 @@ menuconfig IPV6
|
||||||
<https://en.wikipedia.org/wiki/IPv6>.
|
<https://en.wikipedia.org/wiki/IPv6>.
|
||||||
For specific information about IPv6 under Linux, see
|
For specific information about IPv6 under Linux, see
|
||||||
Documentation/networking/ipv6.rst and read the HOWTO at
|
Documentation/networking/ipv6.rst and read the HOWTO at
|
||||||
<http://www.tldp.org/HOWTO/Linux+IPv6-HOWTO/>
|
<https://www.tldp.org/HOWTO/Linux+IPv6-HOWTO/>
|
||||||
|
|
||||||
To compile this protocol support as a module, choose M here: the
|
To compile this protocol support as a module, choose M here: the
|
||||||
module will be called ipv6.
|
module will be called ipv6.
|
||||||
|
|
Loading…
Reference in New Issue