allow ftp urls by default

They're no worse than http certianly. And, the backport of these
security fixes has to deal with wget, which supports http https and ftp
and has no way to turn off individual schemes, so this will make that
easier.
This commit is contained in:
Joey Hess 2018-06-18 15:36:12 -04:00
parent c93b6c1e08
commit 3c0a538335
No known key found for this signature in database
GPG key ID: DB12DB0FF05F8F38
5 changed files with 5 additions and 5 deletions

2
NEWS
View file

@ -1,6 +1,6 @@
git-annex (6.20180622) upstream; urgency=high
A security fix has changed git-annex to only support http and https
A security fix has changed git-annex to only support http, https, and ftp
URL schemes by default. You can enable other URL schemes, at your own risk,
using annex.security.allowed-url-schemes.