Security fixes for download-3rd-party.rb

This commit is contained in:
George 2024-12-29 22:52:32 -03:00 committed by GitHub
parent 8d5448601b
commit 1c27220f59
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

View File

@ -70,7 +70,7 @@ Jekyll::Hooks.register :site, :after_init do |site|
unless File.file?(dest)
puts "Downloading #{url} to #{dest}"
File.open(dest, "wb") do |saved_file|
URI.open(url, "rb") do |read_file|
URI(url).open("rb") do |read_file|
saved_file.write(read_file.read)
end
end
@ -148,7 +148,7 @@ Jekyll::Hooks.register :site, :after_init do |site|
puts "Downloading fonts from #{url} to #{dest}"
# download the css file with a fake user agent to force downloading woff2 fonts instead of ttf
# user agent from https://www.whatismybrowser.com/guides/the-latest-user-agent/chrome
doc = Nokogiri::HTML(URI.open(url, "User-Agent" => "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"))
doc = Nokogiri::HTML(URI(url).open("User-Agent" => "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"))
css = CssParser::Parser.new
css.load_string! doc.document.text