Cleartext HTTP endpoint (ARCH314)
Dieser Inhalt ist noch nicht in deiner Sprache verfügbar.
Key dotnet.security.cleartext-http · Severity warning · Category security · CWE CWE-319
Communicating over http:// sends credentials and data in cleartext that anyone on the network can read or modify. Use TLS.
Incorrect
Section titled “Incorrect”var response = await client.GetAsync("http://api.example.com/users");Correct
Section titled “Correct”var response = await client.GetAsync("https://api.example.com/users");Switch all endpoints to https://; avoid cleartext HTTP even for internal calls.