Stop using --use-mirrors when installing requirements.

gsnedders · gsnedders · commit 18bd38ae8b8b · 2014-01-05T12:09:24.000Z
--use-mirrors both found mirrors and accessed them insecurely, yet trusted them (CVE-2013-5123); pip 1.5 removes support.
diff --git a/requirements-install.sh b/requirements-install.sh
@@ -5,16 +5,16 @@ if [[ $USE_OPTIONAL != "true" && $USE_OPTIONAL != "false" ]]; then
   exit 1
 fi
 
-pip install -r requirements-test.txt --use-mirrors
+pip install -r requirements-test.txt
 
 if [[ $USE_OPTIONAL == "true" && $TRAVIS_PYTHON_VERSION != "pypy" ]]; then
   if [[ $TRAVIS_PYTHON_VERSION == "2.6" ]]; then
-    pip install -r requirements-optional-2.6.txt --use-mirrors
+    pip install -r requirements-optional-2.6.txt
   else
-    pip install -r requirements-optional-cpython.txt --use-mirrors
+    pip install -r requirements-optional-cpython.txt
   fi
 fi
 
 if [[ $FLAKE == "true" ]]; then
-  pip install --use-mirrors flake8
+  pip install flake8
 fi
