hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-26 17:25:19 +02:00
Code Issues Packages Projects Releases Wiki Activity

Java: Convert android-web-resource-response to data extensions.

Browse Source
This commit is contained in:
Michael Nebel
2022-11-22 09:35:52 +01:00
parent 5c15ad412c
commit ab12b6cc2b
3 changed files with 16 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files

15
java/ql/src/experimental/Security/CWE/CWE-200/AndroidWebResourceResponse.qll
View File

@@ -6,6 +6,10 @@ private import semmle.code.java.dataflow.ExternalFlow
private import semmle.code.java.dataflow.FlowSteps
private import semmle.code.java.frameworks.android.WebView
private class ActivateModels extends ActiveExperimentalModels {
ActivateModels() { this = "android-web-resource-response" }
}
/**
* The Android class `android.webkit.WebResourceRequest` for handling web requests.
*/
@@ -68,14 +72,3 @@ private class FetchUrlStep extends AdditionalValueStep {
)
}
}
/** Value/taint steps relating to url loading and file reading in an Android application. */
private class LoadUrlSummaries extends SummaryModelCsv {
override predicate row(string row) {
row =
[
"java.io;FileInputStream;true;FileInputStream;;;Argument[0];Argument[-1];taint;manual",
"android.webkit;WebResourceRequest;false;getUrl;;;Argument[-1];ReturnValue;taint;manual"
]
}
}