[CXF-8437] DefaultHostnameVerifier accepts any certificate as valid which is a secure issue

• Type: Improvement
• Status: Closed
• Priority: Minor
• Resolution: Duplicate
• Affects Version/s: 3.4.2
• Estimated Complexity: Unknown
• Assignee: Freeman Yue Fang
• Reporter: Alan Mehio
• Created: 17/Mar/21 21:21
• Updated: 18/Sep/23 18:51
• Resolved: 18/Mar/21 18:54

Description

The GitHub code scanning  is  flagging an error[ see|https://github.com/apache/cxf/pull/755/checks?check_run_id=2125425364]

 for this security issue  unsafe hostname verification

from CodeQL documenation.  

Any idea if the Github new annotation on unchanged files is helping or it is disturbing  

  

Issue Links

• duplicates: CXF-8415 DefaultHostnameVerifier fails with HttpCore NIO