Przeglądaj źródła

Only send GitHub API token to api.github.com domain (#8747)

Matthias Van Woensel 5 lat temu
rodzic
commit
067101dbf5
1 zmienionych plików z 1 dodań i 1 usunięć
  1. 1 1
      src/Composer/Util/RemoteFilesystem.php

+ 1 - 1
src/Composer/Util/RemoteFilesystem.php

@@ -277,7 +277,7 @@ class RemoteFilesystem
 
         if (isset($options['github-token'])) {
             // only add the access_token if it is actually a github URL (in case we were redirected to S3)
-            if (preg_match('{^https?://([a-z0-9-]+\.)*github\.com/}', $fileUrl)) {
+            if (preg_match('{^https?://api\.github\.com/}', $fileUrl)) {
                 $options['http']['header'][] = 'Authorization: token '.$options['github-token'];
             }
             unset($options['github-token']);