diff --git a/pom.xml b/pom.xml index c57af4ef..c11f6104 100644 --- a/pom.xml +++ b/pom.xml @@ -58,7 +58,11 @@ wink-json4j 1.4 - + + io.github.pixee + java-security-toolkit + + @@ -139,4 +143,16 @@ HEAD + + + + io.github.pixee + java-security-toolkit + ${versions.java-security-toolkit} + + + + + 1.2.0 + diff --git a/src/main/java/com/hcl/appscan/sdk/http/HttpClient.java b/src/main/java/com/hcl/appscan/sdk/http/HttpClient.java index 75a23018..cccdb6c5 100644 --- a/src/main/java/com/hcl/appscan/sdk/http/HttpClient.java +++ b/src/main/java/com/hcl/appscan/sdk/http/HttpClient.java @@ -5,6 +5,8 @@ */ package com.hcl.appscan.sdk.http; +import io.github.pixee.security.HostValidator; +import io.github.pixee.security.Urls; import org.apache.wink.json4j.JSONException; import org.apache.wink.json4j.JSONObject; import java.io.DataOutputStream; @@ -330,7 +332,7 @@ private HttpResponse makeRequest(Method method, String url, private HttpURLConnection makeConnection(String url, Method method, Map headerProperties) throws IOException { - URL requestURL = new URL(url); + URL requestURL = Urls.create(url, Urls.HTTP_PROTOCOLS, HostValidator.DENY_COMMON_INFRASTRUCTURE_TARGETS); HttpURLConnection conn = null; conn = (HttpURLConnection) requestURL.openConnection(m_proxy); conn.setRequestMethod(method.name()); diff --git a/src/main/java/com/hcl/appscan/sdk/http/HttpsClient.java b/src/main/java/com/hcl/appscan/sdk/http/HttpsClient.java index 982bdae3..72cb0edd 100644 --- a/src/main/java/com/hcl/appscan/sdk/http/HttpsClient.java +++ b/src/main/java/com/hcl/appscan/sdk/http/HttpsClient.java @@ -5,6 +5,8 @@ package com.hcl.appscan.sdk.http; +import io.github.pixee.security.HostValidator; +import io.github.pixee.security.Urls; import java.io.DataOutputStream; import java.io.IOException; //import java.net.HttpsURLConnection; @@ -268,7 +270,7 @@ private HttpResponse makeRequest(Method method, String url, private HttpsURLConnection makeConnection(String url, Method method, Map headerProperties) throws IOException { - URL requestURL = new URL(url); + URL requestURL = Urls.create(url, Urls.HTTP_PROTOCOLS, HostValidator.DENY_COMMON_INFRASTRUCTURE_TARGETS); try { SSLContext sc = SSLContext.getInstance("TLS");