Add additional test cases

2026-04-30 11:15:13 +02:00 · 2024-01-11 16:14:27 +00:00
parent f9bb004618
commit a1a2acd3ce
2 changed files with 18 additions and 0 deletions
--- a/java/ql/lib/semmle/code/java/security/SensitiveUiQuery.qll
+++ b/java/ql/lib/semmle/code/java/security/SensitiveUiQuery.qll
@@ -10,6 +10,10 @@ private module NotificationTrackingConfig implements DataFlow::ConfigSig {
  predicate isSource(DataFlow::Node src) { src.asExpr() instanceof SensitiveExpr }

  predicate isSink(DataFlow::Node sink) { sinkNode(sink, "notification") }
+
+  predicate allowImplicitRead(DataFlow::Node node, DataFlow::ContentSet c) {
+    isSink(node) and exists(c)
+  }
 }

 /** Taint tracking flow for sensitive data flowing to system notifications. */