diff --git a/pom.xml b/pom.xml
index c57af4ef..c11f6104 100644
--- a/pom.xml
+++ b/pom.xml
@@ -58,7 +58,11 @@
wink-json4j
1.4
-
+
+ io.github.pixee
+ java-security-toolkit
+
+
@@ -139,4 +143,16 @@
HEAD
+
+
+
+ io.github.pixee
+ java-security-toolkit
+ ${versions.java-security-toolkit}
+
+
+
+
+ 1.2.0
+
diff --git a/src/main/java/com/hcl/appscan/sdk/http/HttpClient.java b/src/main/java/com/hcl/appscan/sdk/http/HttpClient.java
index 75a23018..cccdb6c5 100644
--- a/src/main/java/com/hcl/appscan/sdk/http/HttpClient.java
+++ b/src/main/java/com/hcl/appscan/sdk/http/HttpClient.java
@@ -5,6 +5,8 @@
*/
package com.hcl.appscan.sdk.http;
+import io.github.pixee.security.HostValidator;
+import io.github.pixee.security.Urls;
import org.apache.wink.json4j.JSONException;
import org.apache.wink.json4j.JSONObject;
import java.io.DataOutputStream;
@@ -330,7 +332,7 @@ private HttpResponse makeRequest(Method method, String url,
private HttpURLConnection makeConnection(String url, Method method,
Map headerProperties) throws IOException {
- URL requestURL = new URL(url);
+ URL requestURL = Urls.create(url, Urls.HTTP_PROTOCOLS, HostValidator.DENY_COMMON_INFRASTRUCTURE_TARGETS);
HttpURLConnection conn = null;
conn = (HttpURLConnection) requestURL.openConnection(m_proxy);
conn.setRequestMethod(method.name());
diff --git a/src/main/java/com/hcl/appscan/sdk/http/HttpsClient.java b/src/main/java/com/hcl/appscan/sdk/http/HttpsClient.java
index 982bdae3..72cb0edd 100644
--- a/src/main/java/com/hcl/appscan/sdk/http/HttpsClient.java
+++ b/src/main/java/com/hcl/appscan/sdk/http/HttpsClient.java
@@ -5,6 +5,8 @@
package com.hcl.appscan.sdk.http;
+import io.github.pixee.security.HostValidator;
+import io.github.pixee.security.Urls;
import java.io.DataOutputStream;
import java.io.IOException;
//import java.net.HttpsURLConnection;
@@ -268,7 +270,7 @@ private HttpResponse makeRequest(Method method, String url,
private HttpsURLConnection makeConnection(String url, Method method,
Map headerProperties) throws IOException {
- URL requestURL = new URL(url);
+ URL requestURL = Urls.create(url, Urls.HTTP_PROTOCOLS, HostValidator.DENY_COMMON_INFRASTRUCTURE_TARGETS);
try {
SSLContext sc = SSLContext.getInstance("TLS");