File tree Expand file tree Collapse file tree 1 file changed +3
-3
lines changed
rust/ql/src/queries/security/CWE-319 Expand file tree Collapse file tree 1 file changed +3
-3
lines changed Original file line number Diff line number Diff line change 44<qhelp >
55<overview >
66
7- <p >Constructing URLs with the HTTP protocol can lead to unsecured connections.</p >
7+ <p >Constructing URLs with the HTTP protocol can lead to insecure connections.</p >
88
99<p >Furthermore, constructing URLs with the HTTP protocol can create problems if other parts of the
1010code expect HTTPS URLs. A typical pattern is to use libraries that expect secure connections,
@@ -14,7 +14,7 @@ which may fail or fall back to insecure behavior when provided with HTTP URLs in
1414<recommendation >
1515
1616<p >When you construct a URL for network requests, ensure that you use an HTTPS URL rather than an HTTP URL.
17- Then, any connections that are made using that URL are secure SSL/ TLS connections.</p >
17+ Then, any connections that are made using that URL are secure TLS connections.</p >
1818
1919</recommendation >
2020<example >
@@ -26,7 +26,7 @@ by attackers:</p>
2626<sample src =" UseOfHttpBad.rs" />
2727
2828<p >A better approach is to use HTTPS. When the request is made using an HTTPS URL, the connection
29- is a secure SSL/ TLS connection:</p >
29+ is a secure TLS connection:</p >
3030
3131<sample src =" UseOfHttpGood.rs" />
3232
You can’t perform that action at this time.
0 commit comments