Nugetgallery: [Gallery] Stop turning http urls into link automatically

Created on 28 Aug 2018  路  2Comments  路  Source: NuGet/NuGetGallery

The display package page automatically transforms links in the package's description and release notes to HTML anchor tags. This should only happen for HTTPS links; HTTP links should be kept as plaintext.

Gallery UI Security Security

Most helpful comment

I'm curious here: why? I'm all for https:// everywhere too, but: what does this help?

All 2 comments

I'm curious here: why? I'm all for https:// everywhere too, but: what does this help?

@NickCraver , we are looking into ways to encourage package publishers to use https everywhere. We will punt this work item for the time being and start with warnings on upload.

Was this page helpful?
0 / 5 - 0 ratings