Skip to content

Commit c26a07b

Browse files
geoffw0paldepind
andauthored
Apply suggestions from code review
Co-authored-by: Simon Friis Vindum <[email protected]>
1 parent 6f1fcbf commit c26a07b

File tree

1 file changed

+3
-3
lines changed

1 file changed

+3
-3
lines changed

rust/ql/src/queries/security/CWE-319/UseOfHttp.qhelp

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,7 @@
44
<qhelp>
55
<overview>
66

7-
<p>Constructing URLs with the HTTP protocol can lead to unsecured connections.</p>
7+
<p>Constructing URLs with the HTTP protocol can lead to insecure connections.</p>
88

99
<p>Furthermore, constructing URLs with the HTTP protocol can create problems if other parts of the
1010
code expect HTTPS URLs. A typical pattern is to use libraries that expect secure connections,
@@ -14,7 +14,7 @@ which may fail or fall back to insecure behavior when provided with HTTP URLs in
1414
<recommendation>
1515

1616
<p>When you construct a URL for network requests, ensure that you use an HTTPS URL rather than an HTTP URL.
17-
Then, any connections that are made using that URL are secure SSL/TLS connections.</p>
17+
Then, any connections that are made using that URL are secure TLS connections.</p>
1818

1919
</recommendation>
2020
<example>
@@ -26,7 +26,7 @@ by attackers:</p>
2626
<sample src="UseOfHttpBad.rs" />
2727

2828
<p>A better approach is to use HTTPS. When the request is made using an HTTPS URL, the connection
29-
is a secure SSL/TLS connection:</p>
29+
is a secure TLS connection:</p>
3030

3131
<sample src="UseOfHttpGood.rs" />
3232

0 commit comments

Comments
 (0)