Java: add negative test cases for WebView file access query

2026-04-30 03:05:15 +02:00 · 2022-11-15 13:50:31 -05:00
parent 1d71c38a8f
commit 10875568ec
1 changed files with 10 additions and 0 deletions
--- a/java/ql/test/query-tests/security/CWE-200/semmle/tests/WebViewFileAccess.java
+++ b/java/ql/test/query-tests/security/CWE-200/semmle/tests/WebViewFileAccess.java
@@ -11,4 +11,14 @@ class WebViewFileAccess {

        settings.setAllowUniversalAccessFromFileURLs(true);
    }
+
+    void configureSafe(WebView view) {
+        WebSettings settings = view.getSettings();
+
+        settings.setAllowFileAccess(false);
+
+        settings.setAllowFileAccessFromFileURLs(false);
+
+        settings.setAllowUniversalAccessFromFileURLs(false);
+    }
 }