You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
http://localhost is common for some testing scenarios and situations where communication does not leave the OS are not a risk.
To Reproduce
Steps to reproduce the behavior:
Add 'http://localhost' use in code.
Enable recommended configuration.
Run eslint
See report similar to:
Error @microsoft/sdl/no-insecure-url: Insecure protocols such as [HTTP](https://en.wikipedia.org/wiki/Hypertext_Transfer_Protocol) or [FTP](https://en.wikipedia.org/wiki/File_Transfer_Protocol) should be replaced by their encrypted counterparts ([HTTPS](https://en.wikipedia.org/wiki/HTTPS), [FTPS](https://en.wikipedia.org/wiki/FTPS)) to avoid sending (potentially sensitive) data over untrusted network in plaintext.: Do not use insecure URLs
http://localhost
is common for some testing scenarios and situations where communication does not leave the OS are not a risk.To Reproduce
Steps to reproduce the behavior:
'http://localhost'
use in code.Related
See tslint no-http issue where localhost was resolved to be allowed.
Expected behavior
http://localhost
should be allowed.The text was updated successfully, but these errors were encountered: