False positive: "http:" flagged as a variable name

[scovetta]

Reported via Twitter:
https://twitter.com/anuraj/status/1107515716800933888

Instead of flagging http:, we should probably include the slashes too. That should cut down a bit on the noise.

[joshbw]

This was updated ages ago in https://github.com/Microsoft/DevSkim/blob/master/rules/default/security/attack_surface/outbound_network.json - it requires finding http:/ - which plugin is in use? That plugin likely has an outdated rule

[anuraj]

I am not using any plugins - default installation I mean. I am using VS 2017 DevSkim extension.

Here is the details of extension.

Here is the details of Visual Studio.

It is throwing this error for an Angular typescript file.