All rules →
Rules / Swift
SHIELD-SWIFT-010

Insecure TLS trust bypass

criticalSwiftCWE-295CVSS 9.1

What it detects

A URLSession delegate returns a credential from serverTrust without validation.

How to fix

Validate the server trust with SecTrustEvaluateWithError or pinning before accepting.

Scan your repo freeFull documentation
Back to all rules
SHIELD-SWIFT-010: Insecure TLS trust bypass — Zennoxa Shield