hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-25 16:55:19 +02:00
Code Issues Packages Projects Releases Wiki Activity

Update to DataFlow::Global

Browse Source
This commit is contained in:
Ed Minnix
2023-03-24 09:54:53 -04:00
parent 2eea34dc4a
commit 1bf4dd9649
12 changed files with 19 additions and 19 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
java/ql/src/Security/CWE/CWE-489/WebviewDebuggingEnabled.ql
View File

@@ -15,5 +15,5 @@ import semmle.code.java.security.WebviewDebuggingEnabledQuery
import WebviewDebugEnabledFlow::PathGraph
from WebviewDebugEnabledFlow::PathNode source, WebviewDebugEnabledFlow::PathNode sink
where WebviewDebugEnabledFlow::hasFlowPath(source, sink)
where WebviewDebugEnabledFlow::flowPath(source, sink)
select sink, source, sink, "Webview debugging is enabled."

2
java/ql/src/Security/CWE/CWE-749/UnsafeAndroidAccess.ql
View File

@@ -17,6 +17,6 @@ import semmle.code.java.security.UnsafeAndroidAccessQuery
import FetchUntrustedResourceFlow::PathGraph
from FetchUntrustedResourceFlow::PathNode source, FetchUntrustedResourceFlow::PathNode sink
where FetchUntrustedResourceFlow::hasFlowPath(source, sink)
where FetchUntrustedResourceFlow::flowPath(source, sink)
select sink.getNode(), source, sink, "Unsafe resource fetching in Android WebView due to $@.",
source.getNode(), sink.getNode().(UrlResourceSink).getSinkType()

2
java/ql/src/Security/CWE/CWE-940/AndroidIntentRedirection.ql
View File

@@ -18,7 +18,7 @@ import semmle.code.java.security.AndroidIntentRedirectionQuery
import IntentRedirectionFlow::PathGraph
from IntentRedirectionFlow::PathNode source, IntentRedirectionFlow::PathNode sink
where IntentRedirectionFlow::hasFlowPath(source, sink)
where IntentRedirectionFlow::flowPath(source, sink)
select sink.getNode(), source, sink,
"Arbitrary Android activities or services can be started from a $@.", source.getNode(),
"user-provided value"