In requests.rb, there is:
def find_address_containing_http(file_content)
file_content.scan(URI.regexp(['http'])).map(&:compact).map(&:last)
end
This regex is far too aggressive: it looks a URL anywhere in the code, without regard for _why_ that URL is being used. For example, an xmlns value would be an insecure URL (e.g.
I can't validate (or package) my app because of this code. Is there a way I can tell the validation to ignore those sections?
