rspec/rules/S5332/message.adoc

8 lines
302 B
Plaintext
Raw Normal View History

=== Message
* Using {protocol.insecure} protocol is insecure. Use {protocol.alternatives} instead.
* Using a relaxed mixed content policy is security-sensitive.
* Make sure allowing clear-text traffic is safe here.
* Omitting {https_only} enables clear-text protocols. Make sure it is safe here.