refactor(@angular-devkit/build-angular): remove disabling certificate validation when inlining fonts

alan-agius4 · alan-agius4 · commit cdcc8586a08f · 2023-08-30T17:02:29.000+02:00
Disabling certificate validation is strongly discouraged and is not required for inling of fonts. Addresses https://github.com/angular/angular-cli/security/code-scanning/29 Closes #25731
diff --git a/packages/angular_devkit/build_angular/src/utils/index-file/inline-fonts.ts b/packages/angular_devkit/build_angular/src/utils/index-file/inline-fonts.ts
@@ -210,7 +210,6 @@ export class InlineFontsProcessor {
           url,
           {
             agent,
-            rejectUnauthorized: false,
             headers: {
               'user-agent':
                 'Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36',

Original file line number	Diff line number	Diff line change
`@@ -210,7 +210,6 @@ export class InlineFontsProcessor {`
`210`	`210`	`url,`
`211`	`211`	`{`
`212`	`212`	`agent,`
`213`		`- rejectUnauthorized: false,`
`214`	`213`	`headers: {`
`215`	`214`	`'user-agent':`
`216`	`215`	`'Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36',`