greasemonkey/greasemonkey — Issue #1485: Check both updateUrl and downloadUrl for secure-ness
Author: arantius
Created: 2011-12-09 14:37:02+00:00
State: open

We have a "require secure updates" option. Today we're only checking the scheme of `this._updateURL` and then (in `installUpdate`) blindly using `this._downloadURL` regardless of its scheme. We should check both.

(When making this change it may also be a good time to swap all that logic over to using `RemoteScript`.)