AppSweep identifies Medium security vulnerability: HTTP URLs to opengis were found

locationtech / jts

The JTS Topology Suite is a Java library for creating and manipulating vector geometry.

Other

1.9k stars 437 forks source link

AppSweep identifies Medium security vulnerability: HTTP URLs to opengis were found #1021

Closed DropkickSteve closed 8 months ago

DropkickSteve commented 8 months ago

In my Android app the security scan found a http vulnerability. The source code contains the following: public static final String GML_NAMESPACE = "http://www.opengis.net/gml"

Is there a chance this might be updated to a https secure url?

mprins commented 8 months ago

It is not a URL it is a namespace reference ID URI, it cannot be changed. Please read http://www.rpbourret.com/xml/NamespaceMyths.htm

DropkickSteve commented 8 months ago

@mprins Thank you for the immediate response!