Added nosec directive for gosec

Ne0nd0g · Nov 2, 2023 · 5931532 · 5931532
1 parent 0a70aa9
commit 5931532
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/clients/http/http.go b/clients/http/http.go
@@ -247,7 +247,7 @@ func getClient(protocol string, proxyURL string, ja3 string, parrot string, inse
 	// Setup TLS configuration
 	TLSConfig := &tls.Config{
 		MinVersion:         tls.VersionTLS12,
-		InsecureSkipVerify: insecure,
+		InsecureSkipVerify: insecure, // #nosec G402 - intentionally configurable to allow self-signed certificates. See https://github.com/Ne0nd0g/merlin/issues/59
 		CipherSuites: []uint16{
 			tls.TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,
 			tls.TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA,