Description

The service communicates with third-party APIs using HTTP. The request or its response may be tampered with between your server and that of the third party. Moreover, the content of the request or response may be inspected.

Rationale

This finding works by identifying an API that makes use of an external HTTP dependency over an insecure protocol (HTTP).

Remediation

• Perform calls to external APIs over HTTPS.