66
77<p >Constructing URLs with the HTTP protocol can lead to unsecured connections.</p >
88
9- <p >Furthermore, constructing URLs with the HTTP protocol can create problems if other parts of the
10- code expect HTTPS URLs. A typical pattern is to use libraries that expect secure connections,
9+ <p >Furthermore, constructing URLs with the HTTP protocol can create problems if other parts of the
10+ code expect HTTPS URLs. A typical pattern is to use libraries that expect secure connections,
1111which may fail or fall back to insecure behavior when provided with HTTP URLs instead of HTTPS URLs.</p >
1212
1313</overview >
1414<recommendation >
1515
16- <p >When you construct a URL for network requests, ensure that you use an HTTPS URL rather than an HTTP URL.
16+ <p >When you construct a URL for network requests, ensure that you use an HTTPS URL rather than an HTTP URL.
1717Then, any connections that are made using that URL are secure SSL/TLS connections.</p >
1818
1919</recommendation >
2020<example >
2121
22- <p >The following example shows two ways of making a network request using a URL. When the request is
23- made using an HTTP URL rather than an HTTPS URL, the connection is unsecured and can be intercepted
22+ <p >The following example shows two ways of making a network request using a URL. When the request is
23+ made using an HTTP URL rather than an HTTPS URL, the connection is unsecured and can be intercepted
2424by attackers. When the request is made using an HTTPS URL, the connection is a secure SSL/TLS connection.</p >
2525
2626<sample src =" UseOfHttpBad.rs" />
@@ -34,15 +34,15 @@ by attackers. When the request is made using an HTTPS URL, the connection is a s
3434
3535<li >
3636OWASP:
37- <a href =" https://cheatsheetseries.owasp.org/cheatsheets/Transport_Layer_Protection_Cheat_Sheet .html" >Transport Layer Protection Cheat Sheet</a >.
37+ <a href =" https://cheatsheetseries.owasp.org/cheatsheets/Transport_Layer_Security_Cheat_Sheet .html" >Transport Layer Security Cheat Sheet</a >.
3838</li >
3939<li >
4040OWASP Top 10:
4141<a href =" https://owasp.org/Top10/A08_2021-Software_and_Data_Integrity_Failures/" >A08:2021 - Software and Data Integrity Failures</a >.
4242</li >
43- <li >Rust reqwest documentation:
43+ <li >Rust reqwest documentation:
4444<a href =" https://docs.rs/reqwest/" >reqwest crate</a >.
4545</li >
4646
4747</references >
48- </qhelp >
48+ </qhelp >
0 commit comments