vaadin / appsec-kit

Other
1 stars 0 forks source link

HTTP connections need a set timeout #77

Closed tepi closed 1 year ago

tepi commented 1 year ago

At least OpenSourceVulnerabilityClient opens HTTP connections, but no timeout value has been set. Looks like the default timeout is infinite (value is 0). This silently blocks AppSec Kit from functioning when you have no internet connection, or the target is blocked by a firewall.

We need to set a timeout and provide a reasonable error message for the developer..