mirror of
https://github.com/github/codeql.git
synced 2026-06-18 11:21:07 +02:00
Add sensitive keyboard cache query
This commit is contained in:
17
java/ql/src/Security/CWE/CWE-524/SensitiveKeyboardCache.ql
Normal file
17
java/ql/src/Security/CWE/CWE-524/SensitiveKeyboardCache.ql
Normal file
@@ -0,0 +1,17 @@
|
||||
/**
|
||||
* @name Android sensetive keyboard cache
|
||||
* @description Sensitive information should not be saved to the keyboard cache.
|
||||
* @kind problem
|
||||
* @problem.severity warning
|
||||
* @id java/android/debuggable-attribute-enabled
|
||||
* @tags security
|
||||
* external/cwe/cwe-489
|
||||
* @precision high
|
||||
*/
|
||||
|
||||
import java
|
||||
import semmle.code.java.security.SensitiveKeyboardCacheQuery
|
||||
|
||||
from AndroidEditableXmlElement el
|
||||
where el = getASensitiveCachedInput()
|
||||
select el, "This input field may contain sensitive information that is saved to the keyboard cache."
|
||||
Reference in New Issue
Block a user