diff --git a/pom.xml b/pom.xml index c57af4ef..6b8caef9 100644 --- a/pom.xml +++ b/pom.xml @@ -58,7 +58,11 @@ wink-json4j 1.4 - + + io.github.pixee + java-security-toolkit + + @@ -139,4 +143,16 @@ HEAD + + + + io.github.pixee + java-security-toolkit + ${versions.java-security-toolkit} + + + + + 1.2.1 + diff --git a/src/main/java/com/hcl/appscan/sdk/http/HttpClient.java b/src/main/java/com/hcl/appscan/sdk/http/HttpClient.java index 2caf1399..9f592db7 100644 --- a/src/main/java/com/hcl/appscan/sdk/http/HttpClient.java +++ b/src/main/java/com/hcl/appscan/sdk/http/HttpClient.java @@ -5,6 +5,8 @@ */ package com.hcl.appscan.sdk.http; +import io.github.pixee.security.HostValidator; +import io.github.pixee.security.Urls; import org.apache.wink.json4j.JSONException; import org.apache.wink.json4j.JSONObject; import java.io.DataOutputStream; @@ -330,7 +332,7 @@ private HttpResponse makeRequest(Method method, String url, private HttpURLConnection makeConnection(String url, Method method, Map headerProperties) throws IOException { - URL requestURL = new URL(url); + URL requestURL = Urls.create(url, Urls.HTTP_PROTOCOLS, HostValidator.DENY_COMMON_INFRASTRUCTURE_TARGETS); HttpURLConnection conn = null; conn = (HttpURLConnection) requestURL.openConnection(m_proxy); conn.setRequestMethod(method.name()); diff --git a/src/main/java/com/hcl/appscan/sdk/http/HttpsClient.java b/src/main/java/com/hcl/appscan/sdk/http/HttpsClient.java index 4b4e293c..6fcdf622 100644 --- a/src/main/java/com/hcl/appscan/sdk/http/HttpsClient.java +++ b/src/main/java/com/hcl/appscan/sdk/http/HttpsClient.java @@ -5,6 +5,8 @@ package com.hcl.appscan.sdk.http; +import io.github.pixee.security.HostValidator; +import io.github.pixee.security.Urls; import java.io.DataOutputStream; import java.io.IOException; //import java.net.HttpsURLConnection; @@ -268,7 +270,7 @@ private HttpResponse makeRequest(Method method, String url, private HttpsURLConnection makeConnection(String url, Method method, Map headerProperties) throws IOException { - URL requestURL = new URL(url); + URL requestURL = Urls.create(url, Urls.HTTP_PROTOCOLS, HostValidator.DENY_COMMON_INFRASTRUCTURE_TARGETS); try { SSLContext sc = SSLContext.getInstance("TLS"); @@ -329,4 +331,4 @@ public void checkClientTrusted(java.security.cert.X509Certificate[] certs, public void checkServerTrusted(java.security.cert.X509Certificate[] certs, String authType) { } -} \ No newline at end of file +}