File tree Expand file tree Collapse file tree 1 file changed +3
-3
lines changed
rust/ql/src/queries/security/CWE-319 Expand file tree Collapse file tree 1 file changed +3
-3
lines changed Original file line number Diff line number Diff line change 4
4
<qhelp >
5
5
<overview >
6
6
7
- <p >Constructing URLs with the HTTP protocol can lead to unsecured connections.</p >
7
+ <p >Constructing URLs with the HTTP protocol can lead to insecure connections.</p >
8
8
9
9
<p >Furthermore, constructing URLs with the HTTP protocol can create problems if other parts of the
10
10
code expect HTTPS URLs. A typical pattern is to use libraries that expect secure connections,
@@ -14,7 +14,7 @@ which may fail or fall back to insecure behavior when provided with HTTP URLs in
14
14
<recommendation >
15
15
16
16
<p >When you construct a URL for network requests, ensure that you use an HTTPS URL rather than an HTTP URL.
17
- Then, any connections that are made using that URL are secure SSL/ TLS connections.</p >
17
+ Then, any connections that are made using that URL are secure TLS connections.</p >
18
18
19
19
</recommendation >
20
20
<example >
@@ -26,7 +26,7 @@ by attackers:</p>
26
26
<sample src =" UseOfHttpBad.rs" />
27
27
28
28
<p >A better approach is to use HTTPS. When the request is made using an HTTPS URL, the connection
29
- is a secure SSL/ TLS connection:</p >
29
+ is a secure TLS connection:</p >
30
30
31
31
<sample src =" UseOfHttpGood.rs" />
32
32
You can’t perform that action at this time.
0 commit comments