-
-
Notifications
You must be signed in to change notification settings - Fork 1.7k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Can we upgrade http to https in url-constructor-detection.js ? #1345
Labels
Comments
I don't think that it's good to report this case in such scanners, however, OK, it's not a big deal, so I'll replace |
Merged
This was referenced Aug 26, 2024
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
core-js/packages/core-js/internals/url-constructor-detection.js
Line 11 in f1303f3
Because core.js, as a dependency of many underlying compilation packages, will appear in chunk-vendors after packaging, but some projects cannot require http, so the packaged code scan will scan out http in url-constructor-detection.js.
http://a
http://a/c%20d?a=1&c=3
...
The text was updated successfully, but these errors were encountered: