You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Unless explicitly requested by the user, any connection with an host with an invalid SSL/TLS certificate.
Actual result
strictSSL is deactivated by default in requestFactory, meaning all invalid certificates won't generate errors. This is not an important issue (it would be very difficult to exploit) but it should not be leaved as is anyway.
See https://github.com/konnectors/libs/blob/master/packages/cozy-konnector-libs/src/libs/request.js#L64
Expected result
Unless explicitly requested by the user, any connection with an host with an invalid SSL/TLS certificate.
Actual result
strictSSL
is deactivated by default inrequestFactory
, meaning all invalid certificates won't generate errors. This is not an important issue (it would be very difficult to exploit) but it should not be leaved as is anyway.This is mandatory for #230 (request/request#1049)
The text was updated successfully, but these errors were encountered: