init: deliberately vulnerable demo (CWE-798/327/89/78/319)

2026-07-21 10:39:18 +02:00
commit 8cdac0dcb6
5 changed files with 31 additions and 0 deletions
@@ -0,0 +1,4 @@
+import requests
+
+def fetch(path):
+    return requests.get("http://api.internal.example/" + path)  # cleartext transport (CWE-319)