http.NewRequest request send to http:// URLs GO-S1028Does not encrypt traffic with TLS, use HTTPS instead: http://127.0.0.1/render
113 },
114 }
115 logger := zapwriter.Logger("test")
116 r, _ := http.NewRequest("GET", "http://127.0.0.1/render", nil)117 for _, tt := range tests {
118 t.Run(tt.name, func(t *testing.T) {
119 duration := time.Second * time.Duration(tt.until-tt.from)
Description
Requests sent via http.NewRequest to http:// URLs is dangerous because the
server is attempting to connect to a website that does not encrypt traffic with
TLS. Instead, it is recommended to use https://.
Bad practice
req, err := http.NewRequest("GET", "http://deepsource.io", nil)
Recommended
req, err := http.NewRequest("GET", "https://deepsource.io", nil)