hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-05-01 11:45:14 +02:00
Code Issues Packages Projects Releases Wiki Activity

Add RequestForgerySanitizer

Browse Source
This commit is contained in:
Tony Torralba
2021-06-17 14:58:27 +02:00
parent 0c71393171
commit 3ec2c1308e
3 changed files with 12 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
java/ql/test/query-tests/security/CWE-749/UnsafeAndroidAccess.java
View File

@@ -147,6 +147,6 @@ public class UnsafeAndroidAccess extends Activity {
String thisUrl = getIntent().getStringExtra("url");
// This should be considered safe - the query lacks a proper sanitizer for partial URLs.
wv.loadUrl("https://www.mycorp.com/" + thisUrl); // $ SPURIOUS: hasUnsafeAndroidAccess
wv.loadUrl("https://www.mycorp.com/" + thisUrl);
}
}