DefaultHttpClient with default constructor is not secure

このページは日本語には対応しておりません。随時翻訳に取り組んでいます。
翻訳に関してご質問やご意見ございましたら、お気軽にご連絡ください。

Metadata

ID: java-security/default-http-client-def-cons

Language: Java

Severity: Notice

Category: Security

CWE: 326

Description

DefaultHttpClient with default constructor is not compatible with TLS 1.2. Make sure your HTTP client support advanced encryption protocols.

Learn more

Non-Compliant Code Examples

public Class {

    public void foobar(){
        HttpClient client = new DefaultHttpClient();
    }
}

Compliant Code Examples

public Class {

    public void foobar() {
        HttpClient client1 = HttpClients.createSystem();
        HttpClient client = HttpClientBuilder.create().useSystemProperties().build();
    }
}