<!-- Warning: The suggested title contains the alert rule name. This can expose security information. --> Tracking issue for: - [ ] https://github.com/houko/SpringBootUnity/security/code-scanning/3
Activity
houko commentedon Sep 13, 2026
该告警已在 PR #44（fix: resolve all six CodeQL security alerts, 提交 0597a65）中修复：
HttpUtil移除了「永远返回 true」的自定义 HostnameVerifier，主机名校验交回 JDK 默认实现。CodeQL 复扫后该告警已标记为 fixed，关闭。