rspec/rules/S5332/message.adoc
2021-11-26 17:02:56 +00:00

8 lines
302 B
Plaintext

=== Message
* Using {protocol.insecure} protocol is insecure. Use {protocol.alternatives} instead.
* Using a relaxed mixed content policy is security-sensitive.
* Make sure allowing clear-text traffic is safe here.
* Omitting {https_only} enables clear-text protocols. Make sure it is safe here.