hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-24 04:36:35 +01:00
Code Issues Packages Projects Releases Wiki Activity

updated location part of query to use abs path and /build

Browse Source
This commit is contained in:
Jami Cogswell
2022-07-29 15:45:54 -04:00
parent 54acd0e330
commit 54470c794d
1 changed files with 5 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
java/ql/src/Security/CWE/CWE-489/DebuggableAttributeTrue.ql
View File

@@ -3,11 +3,11 @@
* @description An enabled debugger can allow for entry points in the application or reveal sensitive information.
* @kind problem
* @problem.severity warning
* @security-severity 7.2
* @id java/android/debuggable-attribute-enabled
* @tags security
* external/cwe/cwe-489
* @precision very-high
* @security-severity 0.1
*/
import java
@@ -17,5 +17,8 @@ from AndroidXmlAttribute androidXmlAttr
where
androidXmlAttr.getName() = "debuggable" and
androidXmlAttr.getValue() = "true" and
not androidXmlAttr.getLocation().toString().matches("%/build/%")
not androidXmlAttr.getLocation().getFile().getAbsolutePath().matches("%/build%") // USE THIS (from speaking with Tony) - 11 MRVA results
//not androidXmlAttr.getLocation().toString().matches("%build%") // my original query - 2 MRVA results
//not androidXmlAttr.getLocation().toString().matches("%/build%") // 11 MRVA results
//not androidXmlAttr.getLocation().getFile().getAbsolutePath().matches("%build%") // 2 MRVA results...
select androidXmlAttr, "The 'debuggable' attribute is enabled."