codeql/java/ql/src/Security/CWE/CWE-295/AndroidMissingCertificatePinning1.java

// BAD - By default, this network call does not use certificate pinning
URLConnection conn = new URL("https://example.com").openConnection();