mirror of
https://github.com/github/codeql.git
synced 2026-05-04 21:25:44 +02:00
Merge pull request #11628 from egregius313/egregius313/android-webview-addjavascriptinterface-dataflow
Java: Add parameters of methods annotated @JavascriptInterface as remote flow sources
This commit is contained in:
@@ -0,0 +1,11 @@
|
||||
import android.webkit.JavascriptInterface;
|
||||
|
||||
public class AndroidExposedObject {
|
||||
public void sink(Object o) {
|
||||
}
|
||||
|
||||
@JavascriptInterface
|
||||
public void test(String arg) {
|
||||
sink(arg); // $hasRemoteValueFlow
|
||||
}
|
||||
}
|
||||
Reference in New Issue
Block a user