fix Security issues

Author: AakashHotchandani

bin/accessibility-automation/plugin/index.js

@@ -1,7 +1,7 @@
 const path = require("node:path");
 const { decodeJWTToken } = require("../../helpers/utils");
 const utils = require('../../helpers/utils');
-const https = require('https');
+const http = require('http');
 
 const browserstackAccessibility = (on, config) => {
   let browser_validation = true;
@@ -26,15 +26,7 @@ const browserstackAccessibility = (on, config) => {
             port,
             path: `/test-uuid?testIdentifier=${encodeURIComponent(testIdentifier)}`,
             method: 'GET',
-            timeout: 2000,
-            // Use proper certificate validation for localhost
-            checkServerIdentity: (host, cert) => {
-              // Allow localhost connections
-              if (host === '127.0.0.1' || host === 'localhost') {
-                return undefined;
-              }
-              return new Error('Hostname verification failed');
-            }
+            timeout: 2000
           };
           const httpModule = http;
           const req = httpModule.request(options, (res) => {

bin/testObservability/reporter/index.js

@@ -11,7 +11,7 @@ const Mocha = requireModule('mocha');
 // const Runnable = requireModule('mocha/lib/runnable');
 const Runnable = require('mocha/lib/runnable'); // need to handle as this isn't present in older mocha versions
 const { v4: uuidv4 } = require('uuid');
-const https = require('https');
+const http = require('http');
 
 const { IPC_EVENTS, TEST_REPORTING_ANALYTICS } = require('../helper/constants');
 const { startIPCServer } = require('../plugin/ipcServer');
@@ -236,7 +236,7 @@ class MyReporter {
             res.end();
             return;
           }
-          const parsedUrl = new URL(req.url, `https://${req.headers.host}`);
+          const parsedUrl = new URL(req.url, `http://${req.headers.host}`);
           const pathname = parsedUrl.pathname;
           const query = parsedUrl.searchParams;