650884 - cfx doc should not use http as an example value for updateURL

Status: RESOLVED FIXED

(Add-on SDK Graveyard :: Documentation, defect, P1)

Description

[Will Bamberg [:wbamberg]]

From https://developer.mozilla.org/en/install_manifests#updateURL

***
Note: It is strongly recommended that the updateURL be an HTTPS (secure) link. Non-secure update URLs can be hijacked by a malicious update.rdf file, enabling malware to infiltrate the user's computer. Alternatively, you could host your extension on AMO and leave out the updateURL completely. This provides secure updates automatically.

New in Firefox 3 For security reasons, Gecko 1.9 applications require that if you specify an updateURL, it must be an https URL, or you must include an updateKey.
***

But the example given in the doc is HTTP, implying that this is OK.

Comment 1

[Will Bamberg [:wbamberg]]

Attachment: Clarified that URLs should use HTTPS

Comment 2

[Will Bamberg [:wbamberg]]

Fixed by: https://github.com/mozilla/addon-sdk/commit/19e163b9ed3cc742b91a621d0a8285e8f6bc9a9e