SEC006
Insecure protocol
Object Pascal — Delphi & Free Pascal
Warning
Security
HTTP, FTP, and Telnet transmit data in cleartext, risking interception
HTTP, FTP, and Telnet transmit data in cleartext, risking interception.
Why this severity
HTTP, FTP, and Telnet transmit data in cleartext, risking interception.
Known false positives
localhost URLs used for local development or testing.
Remediation example
URL := 'https://api.example.com/data'; // instead of: URL := 'http://api.example.com/data';