Python

Python

Made by DeepSource

Use of _create_unverified_context detected BAN-B323

Security
Major
a02 a06 owasp top 10

By default, Python will create a secure, verified ssl context for use in such classes as HTTPSConnection. However, it still allows using an insecure context via the _create_unverified_context that reverts to the previous behavior that does not validate certificates or perform hostname checks.

It is recommended to replace this call with the default HTTPS context.