Qt-Security-QNetworkAccessManagerConnectToHost

Check QNetworkAccessManager::connectToHost

Required inputs: IR

The QNetworkAccessManager::connectToHost() method of the Qt framework allows developers to establish a connection to a remote host using an unencrypted connection. This may allow attackers to intercept and manipulate the traffic. This rule catches all calls to the method and reports them. The QNetworkAccessManager::connectToHostEncrypted() method should be preferred over this method, since it establishes an encrypted connection.

Possible Messages

Key	Text	Severity	Disabled
suspicious_call	Found suspicious call to {}.	None	False

Options

• This rule shares the following common options: exclude_in_macros, exclude_messages_in_system_headers, excludes, extend_exclude_to_macro_invocations, includes, justification_checker, languages, post_processing, provider, report_at, severity

• The following places define options that affect this rule: Stylechecks, Analysis-GlobalOptions

• This rule has no individual options.