public-mirrors
/
composer
mirror of https://github.com/composer/composer
1
0
Fork 0
Code

Only send GitHub API token to api.github.com domain (#8747)

pull/8760/head
Matthias Van Woensel 2020-04-09 09:58:34 +02:00 committed by GitHub
parent 46db638678
commit 067101dbf5
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
src/Composer/Util/RemoteFilesystem.php
View File

@ -277,7 +277,7 @@ class RemoteFilesystem
if (isset($options['github-token'])) { if (isset($options['github-token'])) {
// only add the access_token if it is actually a github URL (in case we were redirected to S3) // only add the access_token if it is actually a github URL (in case we were redirected to S3)
if (preg_match('{^https?://([a-z0-9-]+\.)*github\.com/}', $fileUrl)) { if (preg_match('{^https?://api\.github\.com/}', $fileUrl)) {
$options['http']['header'][] = 'Authorization: token '.$options['github-token']; $options['http']['header'][] = 'Authorization: token '.$options['github-token'];
} }
unset($options['github-token']); unset($options['github-token']);