Insecure Network Communication

Why is this important?

Ensuring that the data in transit is secured between users and your application is the most fundamental security requirement. If this security control is not in place then all bets are off and attackers have many ways to attack your users.

Check out this video for a high-level explanation:

Fixing Insecure Network Communication

Option A: Use an encrypted communications channel

The communication channel used is not encrypted. The traffic could be read by an attacker intercepting the network traffic. Please read the OWASP Transport Layer Protection Cheat Sheet for details on how to do this correctly.

Detailed Instructions

Go through the issues that GuardRails identified in the PR.
Look for code like this:

public without sharing class Foo {
    void foo() {
        HttpRequest req = new HttpRequest();
        req.setEndpoint('http://example.com');
    }
}

Replace it with the secure https alternative:

public without sharing class Foo {
    void foo() {
        HttpRequest req = new HttpRequest();
        req.setEndpoint('https://example.com');
    }
}

Test it
Ship it 🚢 and relax 🌴

GuardRails

General

Apex

C/C++

Elixir

Go

Java

Javascript/TypeScript

Kubernetes

PHP

Python

Ruby

Rust

Solidity

Terraform

Insecure Network Communication

Why is this important?

Fixing Insecure Network Communication

Option A: Use an encrypted communications channel

Detailed Instructions

General References