Files
codeql/ruby/ql/test/query-tests/security/cwe-295/HttpClient.rb
2021-10-15 11:47:28 +02:00

18 lines
380 B
Ruby

require "httpclient"
# BAD
client = HTTPClient.new
client.ssl_config.verify_mode = OpenSSL::SSL::VERIFY_NONE
client.get("https://example.com")
# GOOD
client = HTTPClient.new
client.ssl_config.verify_mode = OpenSSL::SSL::VERIFY_PEER
client.get("https://example.com")
# GOOD
client = HTTPClient.new
client.get("https://example.com")
# GOOD
HTTPClient.get("https://example.com/")