← Rule catalog

rust-doctor · Security

`insecure-http-client`

Detect non-local plain HTTP transport literals

Severity: warning
Confidence: medium
Analyzer: syn-ast
Default policy: Opt-in

Tags

heuristic
security

Framework requirements

No framework requirement.

Limitations

Syntactic analysis does not have rustc name resolution or inferred type information.

Remediation

Use HTTPS or document and narrowly suppress a trusted local transport.

Fix capability: guidance