All rules →
Rules / Dart
SHIELD-DART-005

Insecure certificate validation bypass

criticalDartCWE-295CVSS 9.1

What it detects

A badCertificateCallback returning true disables TLS validation and enables man-in-the-middle attacks.

How to fix

Never unconditionally trust certificates; validate the chain and host properly.

Scan your repo freeFull documentation
Back to all rules
SHIELD-DART-005: Insecure certificate validation bypass — Zennoxa Shield