DefaultHttpClient with default constructor is not secure

문서 > 코드 분석 > Static Analysis Rules > DefaultHttpClient with default constructor is not secure

이 페이지는 아직 한국어로 제공되지 않으며 번역 작업 중입니다. 번역에 관한 질문이나 의견이 있으시면 언제든지 저희에게 연락해 주십시오.

Metadata

ID: java-security/default-http-client-def-cons

Language: Java

Severity: Notice

Category: Security

CWE: 326

Description

DefaultHttpClient with default constructor is not compatible with TLS 1.2. Make sure your HTTP client support advanced encryption protocols.

Learn more

DefaultHttpClient with default constructor is not compatible with TLS 1.2

Non-Compliant Code Examples

public Class {

    public void foobar(){
        HttpClient client = new DefaultHttpClient();
    }
}

Compliant Code Examples

public Class {

    public void foobar() {
        HttpClient client1 = HttpClients.createSystem();
        HttpClient client = HttpClientBuilder.create().useSystemProperties().build();
    }
}