hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-24 04:36:35 +01:00
Code Issues Packages Projects Releases Wiki Activity

Add check for files which provide the app launcher

Browse Source 
Adds support for filtering which applications include the
`android.intent.action.MAIN` intent.
This commit is contained in:
Ed Minnix
2022-08-30 12:54:26 -04:00
parent b5c54f5a3b
commit 500a6f3b86
2 changed files with 17 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
java/ql/src/Security/CWE/CWE-312/AllowBackupAttributeEnabled.ql
View File

@@ -15,6 +15,11 @@ import semmle.code.xml.AndroidManifest
from AndroidApplicationXmlElement androidAppElem
where
androidAppElem.allowsBackup() and
androidAppElem.getFile().(AndroidManifestXmlFile).isInBuildDirectory()
not androidAppElem.getFile().(AndroidManifestXmlFile).isInBuildDirectory() and
(
androidAppElem.allowsBackupExplicitly()
or
androidAppElem.providesMainIntent() and
androidAppElem.allowsBackup()
)
select androidAppElem, "The 'android:allowBackup' attribute is enabled."