From 8a421ca159aab4667e7f332c9ad157820faeeed7 Mon Sep 17 00:00:00 2001 From: Russel Van Tuyl Date: Mon, 27 Nov 2023 08:24:11 -0500 Subject: [PATCH] nosec directives for intentional use of InsecureSkipVerify --- clients/utls/utls.go | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/clients/utls/utls.go b/clients/utls/utls.go index 9db604b..8866f93 100644 --- a/clients/utls/utls.go +++ b/clients/utls/utls.go @@ -132,7 +132,7 @@ func NewTransportFromJA3(ja3 string, InsecureSkipVerify bool, proxy func(*http.R } tlsConfig := &t.Config{ - InsecureSkipVerify: InsecureSkipVerify, + InsecureSkipVerify: InsecureSkipVerify, // #nosec G402 - intentionally configurable to allow self-signed certificates } transport := Transport{ @@ -154,7 +154,7 @@ func NewTransportFromParrot(parrot string, InsecureSkipVerify bool, proxy func(* } tlsConfig := &t.Config{ - InsecureSkipVerify: InsecureSkipVerify, + InsecureSkipVerify: InsecureSkipVerify, // #nosec G402 - intentionally configurable to allow self-signed certificates } transport := Transport{