From 56feaeedc36f14e5fe35cebfbcd1fcf59736adcf Mon Sep 17 00:00:00 2001
From: Casey Rodarmor <casey@rodarmor.com>
Date: Fri, 18 Nov 2022 20:42:17 -0800
Subject: [PATCH] Use more secure cURL options in install.sh (#1416)

---
 www/install.sh | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/www/install.sh b/www/install.sh
index 935f629..b8d0e76 100755
--- a/www/install.sh
+++ b/www/install.sh
@@ -99,7 +99,7 @@ if [ -z ${dest-} ]; then
 fi
 
 if [ -z ${tag-} ]; then
-  tag=$(curl -s "https://api.github.com/repos/casey/just/releases/latest" |
+  tag=$(curl --proto =https --tlsv1.2 -sSf https://api.github.com/repos/casey/just/releases/latest |
     grep tag_name |
     cut -d'"' -f4
   )
@@ -130,7 +130,7 @@ say_err "Destination: $dest"
 say_err "Archive:     $archive"
 
 td=$(mktemp -d || mktemp -d -t tmp)
-curl -sL $archive | tar -C $td -xz
+curl --proto =https --tlsv1.2 -sSfL $archive | tar -C $td -xz
 
 for f in $(ls $td); do
   test -x $td/$f || continue