hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-29 10:45:15 +02:00
Code Issues Packages Projects Releases Wiki Activity

Java: add test cases for setJavaScriptEnabled query

Browse Source
This commit is contained in:
Ed Minnix
2022-11-14 14:33:12 -05:00
parent a7e7334f0f
commit 1132572620
4 changed files with 21 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

18
java/ql/test/query-tests/security/CWE-079/semmle/tests/SetJavascriptEnabled.java Normal file
View File

@@ -0,0 +1,18 @@
package com.example.test;
import android.webkit.WebView;
import android.webkit.WebSettings;
public class SetJavascriptEnabled {
public static void configureWebViewUnsafe(WebView view) {
WebSettings settings = view.getSettings();
settings.setJavaScriptEnabled(true); // $javascriptEnabled
}
public static void configureWebViewSafe(WebView view) {
WebSettings settings = view.getSettings();
// Safe: Javascript disabled
settings.setJavaScriptEnabled(false);
}
}

1
java/ql/test/query-tests/security/CWE-079/semmle/tests/WebViewSetEnabledJavaScript.expected Normal file
View File

@@ -0,0 +1 @@
| SetJavascriptEnabled.java:9:9:9:43 | setJavaScriptEnabled(...) | JavaScript execution enabled in WebView. |

1
java/ql/test/query-tests/security/CWE-079/semmle/tests/WebViewSetEnabledJavaScript.qlref Normal file
View File

@@ -0,0 +1 @@
Security/CWE/CWE-079/AndroidWebViewSettingsEnabledJavaScript.ql

2
java/ql/test/query-tests/security/CWE-079/semmle/tests/options
View File

@@ -1 +1 @@
//semmle-extractor-options: --javac-args -cp ${testdir}/../../../../../stubs/servlet-api-2.4:${testdir}/../../../../../stubs/javax-ws-rs-api-2.1.1/:${testdir}/../../../../../stubs/springframework-5.3.8:${testdir}/../../../../../stubs/javax-faces-2.3/
//semmle-extractor-options: --javac-args -cp ${testdir}/../../../../../stubs/servlet-api-2.4:${testdir}/../../../../../stubs/javax-ws-rs-api-2.1.1/:${testdir}/../../../../../stubs/springframework-5.3.8:${testdir}/../../../../../stubs/javax-faces-2.3/:${testdir}/../../../../../stubs/google-android-9.0.0