# Hardcoded Development URLs

- ID: python-hardcoded-dev-urls
- Severity: LOW
- CWE: CWE-547 (CWE-547)
- Languages: Python
- Frameworks: django, flask, fastapi

## Description

Detects hardcoded development URLs such as localhost or 127.0.0.1
in production code. This indicates:

1. Configuration management issues
2. Potential production deployment problems
3. Leftover development/test code
4. API endpoints pointing to local services

Development URLs should be configurable via environment variables.

## Detection Message

Development URL found at line {line}: {url}

## Remediation

Replace hardcoded URLs with environment variables or configuration.

## Documentation

[object Object]

## Related Rules

- **Hardcoded Development URLs** [LOW]: