hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-30 11:15:13 +02:00
Code Issues Packages Projects Releases Wiki Activity

Java: test files for WebView file access query

Browse Source
This commit is contained in:
Ed Minnix
2022-11-14 15:11:15 -05:00
parent 73d6360eee
commit 7a0544d80e
4 changed files with 19 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
java/ql/test/query-tests/security/CWE-200/semmle/tests/WebViewFileAccess.expected Normal file
View File

@@ -0,0 +1,3 @@
| WebViewFileAccess.java:8:9:8:41 | setAllowFileAccess(...) | WebView setting setAllowFileAccess may allow for unauthorized access of sensitive information. |
| WebViewFileAccess.java:10:9:10:53 | setAllowFileAccessFromFileURLs(...) | WebView setting setAllowFileAccessFromFileURLs may allow for unauthorized access of sensitive information. |
| WebViewFileAccess.java:12:9:12:58 | setAllowUniversalAccessFromFileURLs(...) | WebView setting setAllowUniversalAccessFromFileURLs may allow for unauthorized access of sensitive information. |

14
java/ql/test/query-tests/security/CWE-200/semmle/tests/WebViewFileAccess.java Normal file
View File

@@ -0,0 +1,14 @@
import android.webkit.WebView;
import android.webkit.WebSettings;
class WebViewFileAccess {
void configure(WebView view) {
WebSettings settings = view.getSettings();
settings.setAllowFileAccess(true);
settings.setAllowFileAccessFromFileURLs(true);
settings.setAllowUniversalAccessFromFileURLs(true);
}
}

1
java/ql/test/query-tests/security/CWE-200/semmle/tests/WebViewFileAccess.qlref Normal file
View File

@@ -0,0 +1 @@
Security/CWE/CWE-200/AndroidWebViewSettingsFileAccess.ql

2
java/ql/test/query-tests/security/CWE-200/semmle/tests/options
View File

@@ -1 +1 @@
//semmle-extractor-options: --javac-args -cp ${testdir}/../../../../../stubs/apache-commons-lang3-3.7/
//semmle-extractor-options: --javac-args -cp ${testdir}/../../../../../stubs/apache-commons-lang3-3.7/:${testdir}/../../../../../stubs/google-android-9.0.0