Review

finding-4

org/apache/http/conn/ssl/AllowAllHostnameVerifier.java

verify(String, String[], String[])

class AllowAllHostnameVerifier {
    public final void verify(
            final String host,
            final String[] cns,
            final String[] subjectAlts) {
        // Allow everything - so never blowup.
    }

}