Re: PSA: Does your app use Sparkle? Update it, or use an HTTPS server
Re: PSA: Does your app use Sparkle? Update it, or use an HTTPS server
- Subject: Re: PSA: Does your app use Sparkle? Update it, or use an HTTPS server
- From: Phil Stokes <email@hidden>
- Date: Thu, 11 Feb 2016 10:10:27 +0700
I’m still searching for a way to do that. I don’t see anything included in the /Contents/Frameworks folder that indicates the Sparkle version. Any ideas?
Never mind, found it:
/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/Autoupdate.app/Contents/Info.plist
Note that apps that run on 10.6+ and use earlier versions of Sparkle (again, DriveDx) won’t have the Autoupdate.app at all, so I suppose just testing for the existence of that and finding it missing will indicate and old version of Sparkle.
However, as I understand it, the version of Sparkle is less important than whether the apps/plug-in is using https or not (for both appcast and release notes), at least as far as the current vulnerability is concerned.
Best
Phil
|
_______________________________________________
Do not post admin requests to the list. They will be ignored.
AppleScript-Users mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
Archives: http://lists.apple.com/archives/applescript-users
This email sent to email@hidden