[GH-ISSUE #120] Jeroboam warning for keycastr updater #98

New issue

Closed

opened 2026-05-05 04:55:00 -06:00 by gitea-mirror · 0 comments

gitea-mirror commented

2026-05-05 04:55:00 -06:00

Owner

Originally created by @d7an on GitHub (Jul 24, 2018).
Original GitHub issue: https://github.com/keycastr/keycastr/issues/120

Potential problem with keycastr's updater?

See results from jeroboam

KeyCastr.app
Version: 0.9.6
Sparkle Version: '1.5 Beta 6'
Feed URL: http://stephendeken.net/software/keycastr/appcast.xml
✓ ATS is active
✓ Doesn't allow arbitrary loads
✓ Doesn't have insecure ATS exceptions
✗ Uses an insecure Feed URL
Risk classification: BROKEN UPDATER

https://sparkle-project.org/documentation/security/
https://vulnsec.com/2016/osx-apps-vulnerabilities/
https://github.com/mrackwitz/Jeroboam

Originally created by @d7an on GitHub (Jul 24, 2018). Original GitHub issue: https://github.com/keycastr/keycastr/issues/120 Potential problem with keycastr's updater? See results from jeroboam * KeyCastr.app Version: 0.9.6 Sparkle Version: '1.5 Beta 6' Feed URL: http://stephendeken.net/software/keycastr/appcast.xml ✓ ATS is active ✓ Doesn't allow arbitrary loads ✓ Doesn't have insecure ATS exceptions ✗ Uses an insecure Feed URL Risk classification: BROKEN UPDATER https://sparkle-project.org/documentation/security/ https://vulnsec.com/2016/osx-apps-vulnerabilities/ https://github.com/mrackwitz/Jeroboam