Security Fix: Remove rejectUnauthorized: false

src/cli/download-md.ts

@@ -3,7 +3,7 @@ let downloadMarkdown = async (fileName: string) => {
     let url = `https://raw.githubusercontent.com/johnlindquist/kit-docs/main/${fileName}`
     process.send?.(`Downloading ${url}...`)
     let buffer = await download(url, undefined, {
-      rejectUnauthorized: false,
+      // rejectUnauthorized: false - removed for security reasons
     })
     await writeFile(kitPath(fileName), buffer)
     process.send?.(`Successfully downloaded ${fileName}`)

src/emoji/download-emoji.ts

@@ -5,7 +5,7 @@ try {
     `https://www.scriptkit.com/api/emoji`,
     kitPath("data"),
     {
-      rejectUnauthorized: false,
+      // rejectUnauthorized: false - removed for security reasons
     }
   )
   global.log(`😘 Emoji updated`)

src/help/download-docs.ts

@@ -5,7 +5,7 @@ try {
     `https://www.scriptkit.com/api/docs`,
     kitPath("data"),
     {
-      rejectUnauthorized: false,
+      // rejectUnauthorized: false - removed for security reasons
     }
   )
 

src/hot/download-hot.ts

@@ -5,7 +5,7 @@ try {
     `https://www.scriptkit.com/api/hot`,
     kitPath("data"),
     {
-      rejectUnauthorized: false,
+      // rejectUnauthorized: false - removed for security reasons
     }
   )
   global.log(`🔥 Hot updated`)

src/setup/clone-examples.ts

@@ -3,8 +3,8 @@ import { KIT_FIRST_PATH } from '../core/utils.js'
 async function downloadAndSetupExamples() {
   let destination = kenvPath('tmp')
   await download('https://github.com/johnlindquist/kit-examples-ts/archive/main.zip', destination, {
-    extract: true,
-    rejectUnauthorized: false
+    extract: true
+    // rejectUnauthorized: false - removed for security reasons
   })
 
   let source = path.join(destination, 'kit-examples-main')