Merge pull request #11628 from egregius313/egregius313/android-webview-addjavascriptinterface-dataflow

Java: Add parameters of methods annotated @JavascriptInterface as remote flow sources
This commit is contained in:
Edward Minnix III
2023-01-10 12:41:52 -05:00
committed by GitHub
5 changed files with 42 additions and 0 deletions

View File

@@ -0,0 +1,11 @@
import android.webkit.JavascriptInterface;
public class AndroidExposedObject {
public void sink(Object o) {
}
@JavascriptInterface
public void test(String arg) {
sink(arg); // $hasRemoteValueFlow
}
}