From 25f853ed9c3153d275b8822d5b0b9cfd340b7f83 Mon Sep 17 00:00:00 2001 From: Akond Rahman Date: Thu, 9 Jul 2020 23:08:48 -0500 Subject: [PATCH] Update to fix HTTP endpoints Some of the endpoints are still using HTTP that is insecure ... replaced with secure HTTP (HTTP with SSL/TLS) that exists. These fixes are similar to #1 Details: I found instances where the HTTP protocol is used instead of HTTPS (HTTP with TLS). According to the Common Weakness Enumeration organization this is a security weakness (https://cwe.mitre.org/data/definitions/319.html). --- spanners-api/src/main/resources/application.properties | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/spanners-api/src/main/resources/application.properties b/spanners-api/src/main/resources/application.properties index 9ce54c4..b58273b 100644 --- a/spanners-api/src/main/resources/application.properties +++ b/spanners-api/src/main/resources/application.properties @@ -1,4 +1,4 @@ -eureka.client.serviceUrl.defaultZone=http://localhost:8761/eureka/ +eureka.client.serviceUrl.defaultZone=https://localhost:8761/eureka/ spring.application.name=spanners-api @@ -11,4 +11,4 @@ spring.datasource.driver-class-name=com.mysql.jdbc.Driver # docker-compose will attempt to start spanners-api before the database # is finished initializing. By default, Spring Boot config will fail to # start the app. continueOnError allows it to start and retry later. -spring.datasource.continueOnError=true \ No newline at end of file +spring.datasource.continueOnError=true