swift.common.bufferedhttp has the capability to instantiate an https connection, but is not used directly in any of the swift code (this is likely due to the original swift client using it before it was pulled out). Internal services (for example from proxy -> object) communicate over plain http on a private network. So unless there is something else that I missed, I don't see a security vulnerability in swift.
So for Swift:
swift.common. bufferedhttp has the capability to instantiate an https connection, but is not used directly in any of the swift code (this is likely due to the original swift client using it before it was pulled out). Internal services (for example from proxy -> object) communicate over plain http on a private network. So unless there is something else that I missed, I don't see a security vulnerability in swift.