Merge pull request #11766 from atorralba/atorralba/java/fix-android-query-id

Java: Fix new Android queries' IDs
This commit is contained in:
Edward Minnix III
2022-12-21 11:21:12 -05:00
committed by GitHub
3 changed files with 3 additions and 3 deletions

View File

@@ -1,6 +1,6 @@
/**
* @name Access Java object methods through JavaScript exposure
* @id java/android-webview-addjavascriptinterface
* @id java/android/webview-addjavascriptinterface
* @description Exposing a Java object in a WebView with a JavaScript interface can lead to malicious JavaScript controlling the application.
* @kind problem
* @problem.severity warning

View File

@@ -2,7 +2,7 @@
* @name Android WebView JavaScript settings
* @description Enabling JavaScript execution in a WebView can result in cross-site scripting attacks.
* @kind problem
* @id java/android-websettings-javascript-enabled
* @id java/android/websettings-javascript-enabled
* @problem.severity warning
* @security-severity 6.1
* @precision medium

View File

@@ -2,7 +2,7 @@
* @name Android WebSettings file access
* @kind problem
* @description Enabling access to the file system in a WebView allows attackers to view sensitive information.
* @id java/android-websettings-file-access
* @id java/android/websettings-file-access
* @problem.severity warning
* @security-severity 6.5
* @precision medium