Global Schemes Uses HTTP
- Query id: f30ee711-0082-4480-85ab-31d922d9a2b2
- Query name: Global Schemes Uses HTTP
- Platform: OpenAPI
- Severity: Medium
- Category: Encryption
- URL: Github
Description¶
Global Schemes should use 'https' protocol instead of 'http'
Documentation
Code samples¶
Code samples with security vulnerabilities¶
Postitive test num. 1 - json file
{
"swagger": "2.0",
"info": {
"title": "Simple API overview",
"version": "1.0.0"
},
"schemes": [
"http"
],
"paths": {
"/": {
"get": {
"operationId": "listVersionsv2",
"summary": "List API versions",
"responses": {
"200": {
"description": "200 response"
}
}
}
}
}
}
Postitive test num. 2 - yaml file
swagger: "2.0"
info:
title: Simple API overview
version: 1.0.0
schemes:
- http
paths:
"/":
get:
operationId: listVersionsv2
summary: List API versions
responses:
"200":
description: 200 response