Skip to content

Updated WeakTLSProtocol related rules

What does this MR do?

  • This rule was split into two files:
    • rule-WeakTLSProtocol-DefaultHttpClient
    • rule-WeakTLSProtocol-SSLContext
  • For SSLContext.getInstance, remediation text created.
  • For DefaultHttpClient, the references to SSLContext removed.
  • Updated the mappings file accordingly

What are the relevant issue numbers?

Issue - gitlab-org/gitlab#433049 (closed)

Does this MR meet the acceptance criteria?

Merge request reports

Loading