hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-30 11:15:13 +02:00
Code Issues Packages Projects Releases Wiki Activity

Java: WebView setAllowContentAccess query test cases

Browse Source
This commit is contained in:
Ed Minnix
2022-11-16 00:05:41 -05:00
parent a023726c03
commit 7cc53126f3
3 changed files with 20 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
java/ql/test/query-tests/security/CWE-200/semmle/tests/WebViewContentAccess.expected Normal file
View File

@@ -0,0 +1 @@
| WebViewContentAccess.java:10:9:10:44 | setAllowContentAccess(...) | Sensitive information may be exposed via a malicious link due to access of content:// links being permitted. |

18
java/ql/test/query-tests/security/CWE-200/semmle/tests/WebViewContentAccess.java Normal file
View File

@@ -0,0 +1,18 @@
package com.example.test;
import android.webkit.WebView;
import android.webkit.WebSettings;
public class WebViewContentAccess {
void configureWebViewUnsafe(WebView view) {
WebSettings settings = view.getSettings();
settings.setAllowContentAccess(true);
}
void configureWebViewSafe(WebView view) {
WebSettings settings = view.getSettings();
settings.setAllowContentAccess(false);
}
}

1
java/ql/test/query-tests/security/CWE-200/semmle/tests/WebViewContentAccess.qlref Normal file
View File

@@ -0,0 +1 @@
Security/CWE/CWE-200/AndroidWebViewSettingsContentAccess.ql