CWE 201: fetch function

Question

Veracode scan is showing a low level vulnerability in the fetch function. What's the best way to fix this?

const response = await fetch(url, {
  method: 'POST',
  headers: {
    'Content-Type': 'application/json',
  },

Answer 1

Thanks for the comments everyone. It is a false positive. There is no sensitive data being sent through the 'url' variable.