hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-30 19:26:02 +02:00
Code Issues Packages Projects Releases Wiki Activity

Simplification

Browse Source
This commit is contained in:
Tony Torralba
2022-03-29 09:43:37 +02:00
parent 833d842113
commit 6799838ece
1 changed files with 5 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
java/ql/src/experimental/Security/CWE/CWE-200/AndroidWebResourceResponse.qll
View File

@@ -55,15 +55,13 @@ private class FetchUrlStep extends AdditionalValueStep {
override predicate step(DataFlow::Node pred, DataFlow::Node succ) {
exists(
// webview.loadUrl(url) -> webview.setWebViewClient(new WebViewClient() { shouldInterceptRequest(view, url) });
WebViewLoadUrlMethod lm, ShouldInterceptRequestMethod im, SetWebViewClientMethodAccess sma
MethodAccess lma, ShouldInterceptRequestMethod im, SetWebViewClientMethodAccess sma
|
sma.getArgument(0).getType() = im.getDeclaringType().getASupertype*() and
exists(MethodAccess lma |
lma.getMethod() = lm and
lma.getQualifier().getType() = sma.getQualifier().getType() and
pred.asExpr() = lma.getArgument(0) and
succ.asParameter() = im.getParameter(1)
)
lma.getMethod() instanceof WebViewLoadUrlMethod and
lma.getQualifier().getType() = sma.getQualifier().getType() and
pred.asExpr() = lma.getArgument(0) and
succ.asParameter() = im.getParameter(1)
)
}
}