lang:

Java

regex:

X509Certificate\[\s?\]\s*getAcceptedIssuers\(\s?\)

description:

Possibly disabling certificate validation, ensure not returning null.

http://docs.oracle.com/javase/8/docs/api/javax/net/ssl/X509TrustManager.html

Bad advice here: http://www.nakov.com/blog/2009/07/16/disable-certificate-validation-in-java-ssl-connections/
tags:
insecure certificate validation cwe-295
results