net/http.Server. ListenAndServe() without TLS is a finding in server configurations that should enforce HTTPS.
.ListenAndServe().ListenAndServe()SinkListenAndServe() error
Starts HTTP server without TLS. Finding when used in production without HTTPS redirect.
.ListenAndServeTLS()NeutralListenAndServeTLS(certFile, keyFile string) error
Starts HTTPS server. Safe — preferred over ListenAndServe.
| FQN | Field | |
|---|---|---|
| net/http.Server | fqns[0] |
Wrong FQN → 0 findings. Verify with: change fqns to garbage → must produce 0 results.
// standard library — no go.mod entry required
from codepathfinder.go_rule import GoHTTPServer