Re: Sparkle updater check vulnerability script
Re: Sparkle updater check vulnerability script
- Subject: Re: Sparkle updater check vulnerability script
- From: sqwarqDev <email@hidden>
- Date: Wed, 10 Feb 2016 14:28:56 +0000 (GMT)
On Feb 10, 2016, at 09:24 PM, "Jacopille, David" <email@hidden> wrote:
I’m getting that error also on /Applications/Utilities subfolder.
Yes, it only searches the root of /Applications. However, you can choose the folder yourself by commentingout the lines indicated below. I've also added some error checking :
set x to (path to startup disk) as text
set pathToAppFolder to x & "Applications:" as alias
#comment out the two lines above and uncomment the line below if you want to choose the folder yourself
set pathToAppFolder to choose folder
set plistContents to ""
set x to (path to startup disk) as text
set pathToAppFolder to x & "Applications:" as alias
set infoFilePath to "Contents:info.plist"
set theApp to ""
set sparkleAppsList to {}
set theAppList to do shell script "find /Applications -name Sparkle.framework | awk -F'/' '{print $3}'"
set theAppList to paragraphs of theAppList
repeat with i from 1 to number of items in theAppList
set theApp to text of item i of theAppList
set this_item to item i of theAppList
set f to pathToAppFolder & this_item & ":" & infoFilePath as string
tell application "System Events"
if exists property list file f then
set thePlist to contents of property list file f
set theValue to value of thePlist
if exists SUFeedURL of theValue then
set thisSUFeedURL to SUFeedURL of theValue as text
if thisSUFeedURL contains "http:" then
set theResultString to "Application : " & my theApp & " : " & thisSUFeedURL as text
set end of my sparkleAppsList to theResultString & "
"
end if
end if
end if
end tell
end repeat
display dialog "The following apps do not use secure https connections for the Sparkle updater:
" & sparkleAppsList as string buttons "OK" default button "OK" with title "Sparkle Framework Vulnerability Check"
#EOF
_______________________________________________
Do not post admin requests to the list. They will be ignored.
AppleScript-Users mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
Archives: http://lists.apple.com/archives/applescript-users
This email sent to email@hidden