Cleartext HTTP (ARCH5118)
Ce contenu n’est pas encore disponible dans votre langue.
Key go.security.cleartext-http · Severity warning · Category security · CWE CWE-319
Transmitting sensitive data over http:// lets network attackers eavesdrop on or tamper with the traffic. All sensitive traffic must use TLS (https).
Incorrect
Section titled “Incorrect”resp, _ := http.Post("http://api.example.com/login", "application/json", body)Correct
Section titled “Correct”resp, _ := http.Post("https://api.example.com/login", "application/json", body)Use https:// instead of http:// for all sensitive endpoints and disable cleartext fallbacks.