hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-21 19:26:31 +01:00
Code Issues Packages Projects Releases Wiki Activity

Add suggestions from code review

Browse Source
This commit is contained in:
Tony Torralba
2021-08-04 11:23:57 +02:00
parent a6f2ebe820
commit 5f0ce4d232
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
java/ql/src/Security/CWE/CWE-940/AndroidIntentRedirection.qhelp
View File

@@ -3,7 +3,7 @@
<overview>
<p>An exported Android component that obtains a user-provided Intent and uses it to launch another component
can be exploited to obtain access to private, unexported components of the same app or to launch other apps' components
in behalf of the victim app.</p>
on behalf of the victim app.</p>
</overview>
<recommendation>
<p>Do not export compontents that start other components from a user-provided Intent.