{"action":"closed","issue":{"url":"https://api.github.com/repos/searls/jasmine-rails/issues/133","labels_url":"https://api.github.com/repos/searls/jasmine-rails/issues/133/labels{/name}","comments_url":"https://api.github.com/repos/searls/jasmine-rails/issues/133/comments","events_url":"https://api.github.com/repos/searls/jasmine-rails/issues/133/events","html_url":"https://github.com/searls/jasmine-rails/issues/133","id":33967772,"number":133,"title":"Avoid downloading PhantomJS","user":{"login":"fofr","id":319055,"avatar_url":"https://avatars.githubusercontent.com/u/319055?v=3","gravatar_id":"","url":"https://api.github.com/users/fofr","html_url":"https://github.com/fofr","followers_url":"https://api.github.com/users/fofr/followers","following_url":"https://api.github.com/users/fofr/following{/other_user}","gists_url":"https://api.github.com/users/fofr/gists{/gist_id}","starred_url":"https://api.github.com/users/fofr/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/fofr/subscriptions","organizations_url":"https://api.github.com/users/fofr/orgs","repos_url":"https://api.github.com/users/fofr/repos","events_url":"https://api.github.com/users/fofr/events{/privacy}","received_events_url":"https://api.github.com/users/fofr/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":13,"created_at":"2014-05-21T09:54:40Z","updated_at":"2015-01-09T14:54:43Z","closed_at":"2015-01-09T14:54:43Z","body":"I have a Puppet managed version of phantomjs already available and would like to use this instead of the one installed by the phantomjs gem (the versions differ). Equally I would like to prevent the gem from ever downloading and installing its own version for the reasons below:\r\n\r\n* It downloads phantomjs over http and doesn't perform a checksum. This is a security risk — if malicious code makes it into the PhantomJS distributables, or a malicious HTTP proxy serves up an altered version, that version will be installed and executed without a check.\r\n* Managing two different versions of phantomjs, one on puppet, one not, will lead to user headaches in the future\r\n* The same issue has been discussed on the jasmine-gem and raises further issues:\r\nhttps://github.com/pivotal/jasmine-gem/issues/199\r\n\r\nSome sort of configuration to use whatever phantomjs is already present would be preferred."}}