Added a check that URL is a type of HTTPS uri.

Relates to BZ 1405369
ManageIQ · May 8, 2017 · f20390a · f20390a
1 parent aeccf24
commit f20390a
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/app/models/manageiq/providers/foreman/provider.rb b/app/models/manageiq/providers/foreman/provider.rb
@@ -49,6 +49,10 @@ def connect(options = {})
   end
 
   def verify_credentials(auth_type = nil, options = {})
+    uri = URI.parse(url) unless url.blank?
+    unless uri.kind_of?(URI::HTTPS)
+      raise "URL has to be HTTPS"
+    end
     with_provider_connection(options.merge(:auth_type => auth_type), &:verify?)
   rescue SocketError,
          Errno::ECONNREFUSED,