refactor(@angular-devkit/build-angular): remove disabling certificate validation when inlining fonts

alan-agius4 · alan-agius4 · commit 1ee6ab53497e · 2023-08-30T08:49:58.000Z
Disabling certificate validation is strongly discouraged and is not required for inling of fonts. Addresses https://github.com/angular/angular-cli/security/code-scanning/29 Closes #25731
diff --git a/packages/angular_devkit/build_angular/src/utils/index-file/inline-fonts.ts b/packages/angular_devkit/build_angular/src/utils/index-file/inline-fonts.ts
@@ -210,7 +210,6 @@ export class InlineFontsProcessor {
           url,
           {
             agent,
-            rejectUnauthorized: false,
             headers: {
               'user-agent':
                 'Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36',
diff --git a/tests/legacy-cli/e2e/assets/ng16-issue-throwing-syntax b/tests/legacy-cli/e2e/assets/ng16-issue-throwing-syntax
@@ -0,0 +1 @@
+Subproject commit 08af92db72d96bf57e86b7e8d132f52ae4c5fbcd

Original file line number	Diff line number	Diff line change
`@@ -210,7 +210,6 @@ export class InlineFontsProcessor {`
`210`	`210`	`url,`
`211`	`211`	`{`
`212`	`212`	`agent,`
`213`		`- rejectUnauthorized: false,`
`214`	`213`	`headers: {`
`215`	`214`	`'user-agent':`
`216`	`215`	`'Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36',`
Original file line number	Diff line number	Diff line change
`@@ -0,0 +1 @@`
	`1`	`+Subproject commit 08af92db72d96bf57e86b7e8d132f52ae4c5fbcd`