 code: <a href="https://github.com/zaproxy/zap-extensions/blob/main/addOns/ascanrulesBeta/src/main/java/org/zaproxy/zap/extension/ascanrulesBeta/ExpressionLanguageInjectionScanRule.java">ExpressionLanguageInjectionScanRule.java</a>
<br>
Alert ID: <a href="https://www.zaproxy.org/docs/alerts/90025/">90025</a>.

<h2 id="id-10106">HTTP Only Site</h2>
This active scan rule checks whether an HTTP site is served under HTTPS.
<p>
Latest code: <a href="https://github.com/zaproxy/zap-extensions/blob/main/addOns/asca