Skip to content

Commit 18bd38a

Browse files
committed
Stop using --use-mirrors when installing requirements.
--use-mirrors both found mirrors and accessed them insecurely, yet trusted them (CVE-2013-5123); pip 1.5 removes support.
1 parent c36197d commit 18bd38a

File tree

1 file changed

+4
-4
lines changed

1 file changed

+4
-4
lines changed

requirements-install.sh

+4-4
Original file line numberDiff line numberDiff line change
@@ -5,16 +5,16 @@ if [[ $USE_OPTIONAL != "true" && $USE_OPTIONAL != "false" ]]; then
55
exit 1
66
fi
77

8-
pip install -r requirements-test.txt --use-mirrors
8+
pip install -r requirements-test.txt
99

1010
if [[ $USE_OPTIONAL == "true" && $TRAVIS_PYTHON_VERSION != "pypy" ]]; then
1111
if [[ $TRAVIS_PYTHON_VERSION == "2.6" ]]; then
12-
pip install -r requirements-optional-2.6.txt --use-mirrors
12+
pip install -r requirements-optional-2.6.txt
1313
else
14-
pip install -r requirements-optional-cpython.txt --use-mirrors
14+
pip install -r requirements-optional-cpython.txt
1515
fi
1616
fi
1717

1818
if [[ $FLAKE == "true" ]]; then
19-
pip install --use-mirrors flake8
19+
pip install flake8
2020
fi

0 commit comments

Comments
 (0)