Cleartext HTTP links

Cleartext HTTP links

Description

HTTP sends data in cleartext, exposing it to interception and modification on the network.

Potential impact

  • Sensitive data may be transmitted without transport protection.

Remediation

  • Check that the destination supports HTTPS and use its HTTPS URL.

Examples

Before

html
<a href="http://example.com">Example Link</a>

After

html
<a href="https://example.com">Example Link</a>

Explanation:

  • Before: The HTTP link can expose data sent over the connection.
  • After: HTTPS encrypts transport data and reduces interception and tampering risks. It does not establish that the destination site itself is safe.

References