mirror of
https://github.com/github/codeql.git
synced 2026-04-28 18:25:24 +02:00
Java: Convert android-web-resource-response to data extensions.
This commit is contained in:
6
java/ql/lib/ext/experimental/android.webkit.model.yml
Normal file
6
java/ql/lib/ext/experimental/android.webkit.model.yml
Normal file
@@ -0,0 +1,6 @@
|
||||
extensions:
|
||||
- addsTo:
|
||||
pack: codeql/java-all
|
||||
extensible: extExperimentalSummaryModel
|
||||
data:
|
||||
- ["android.webkit", "WebResourceRequest", False, "getUrl", "", "", "Argument[-1]", "ReturnValue", "taint", "manual", "android-web-resource-response"]
|
||||
6
java/ql/lib/ext/experimental/java.io.model.yml
Normal file
6
java/ql/lib/ext/experimental/java.io.model.yml
Normal file
@@ -0,0 +1,6 @@
|
||||
extensions:
|
||||
- addsTo:
|
||||
pack: codeql/java-all
|
||||
extensible: extExperimentalSummaryModel
|
||||
data:
|
||||
- ["java.io", "FileInputStream", True, "FileInputStream", "", "", "Argument[0]", "Argument[-1]", "taint", "manual", "android-web-resource-response"]
|
||||
@@ -6,6 +6,10 @@ private import semmle.code.java.dataflow.ExternalFlow
|
||||
private import semmle.code.java.dataflow.FlowSteps
|
||||
private import semmle.code.java.frameworks.android.WebView
|
||||
|
||||
private class ActivateModels extends ActiveExperimentalModels {
|
||||
ActivateModels() { this = "android-web-resource-response" }
|
||||
}
|
||||
|
||||
/**
|
||||
* The Android class `android.webkit.WebResourceRequest` for handling web requests.
|
||||
*/
|
||||
@@ -68,14 +72,3 @@ private class FetchUrlStep extends AdditionalValueStep {
|
||||
)
|
||||
}
|
||||
}
|
||||
|
||||
/** Value/taint steps relating to url loading and file reading in an Android application. */
|
||||
private class LoadUrlSummaries extends SummaryModelCsv {
|
||||
override predicate row(string row) {
|
||||
row =
|
||||
[
|
||||
"java.io;FileInputStream;true;FileInputStream;;;Argument[0];Argument[-1];taint;manual",
|
||||
"android.webkit;WebResourceRequest;false;getUrl;;;Argument[-1];ReturnValue;taint;manual"
|
||||
]
|
||||
}
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user