Yeah looks like a duplicate. You may rename the bug to "Please implement some basic safety checks in a CI".

FYI this is still unfixed.
I think it'd be valuable to run another round of fuzzing tests, but this should be fixed before, otherwise it'll just be hit all the time and may hide other bugs.

It seems you missed the creative commons links (on all pages).

Also some more:

• Download page contains links to gpg4win, gpgotools (mac) and rpmfind which

are all available over https.

• documentation page contains another http twitter link.

(Hint: The moartls browser addon for chrome and firefox is extremely useful to
do this)

There are two http links left on the page. One (drm.info) is unfortunately
unavailable over https. The other (openit.de) seems to no longer exist, as the
company has merged with another one and is only a forward to plusserver. Probably
that simply should be changed to https://www.plusserver.com/ (and maybe the logo
as well).