B309.md

Pattern: Use of possibly insecure HTTPSConnection

Issue: -

Description

Use of HTTPSConnection on older versions of Python prior to 2.7.9 and 3.4.3 does not provide security. The Requests package is recommended for a higher-level HTTP client interface.

This rule checks for the following calls:

• httplib.HTTPSConnection
• http.client.HTTPSConnection
• six.moves.http_client.HTTPSConnection

Further Reading

• The Python Standard Library - HTTPSConnection
• The Python Standard Library - ssl - Security considerations
• Bandit - B309: httpsconnection