Skip to content

Commit 5a480bf

Browse files
committed
Give query an id and PathGraph query predicates
1 parent b359802 commit 5a480bf

File tree

1 file changed

+2
-0
lines changed

1 file changed

+2
-0
lines changed

java/ql/src/experimental/Security/CWE/CWE-749/UnsafeAndroidAccess.ql

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,6 @@
11
/**
22
* @name Unsafe resource fetching in Android webview
3+
* @id java/android/unsafe-android-webview-fetch
34
* @description JavaScript rendered inside WebViews can access any protected application file and web resource from any origin
45
* @kind path-problem
56
* @tags security
@@ -11,6 +12,7 @@ import java
1112
import semmle.code.java.frameworks.android.Intent
1213
import semmle.code.java.frameworks.android.WebView
1314
import semmle.code.java.dataflow.FlowSources
15+
import DataFlow::PathGraph
1416

1517
/**
1618
* Methods allowing any-local-file and cross-origin access in the WebSettings class

0 commit comments

Comments
 (0)