hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-20 10:46:30 +01:00
Code Issues Packages Projects Releases Wiki Activity

Add change note

Browse Source
This commit is contained in:
Joe Farebrother
2022-04-27 16:37:58 +01:00
parent 2fc142f41f
commit d88d216388
2 changed files with 7 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
java/ql/src/Security/CWE/CWE-925/ImproperIntentVerification.ql
View File

@@ -1,5 +1,5 @@
/**
* @name Improper Verification of Intent by Broadcast Reciever
* @name Improper Verification of Intent by Broadcast Receiver
* @description The Android application uses a Broadcast Receiver that receives an Intent but does not properly verify that the Intent came from an authorized source.
* @kind problem
* @problem.severity warning

6
java/ql/src/change-notes/2022-04-27-intent-verification.md Normal file
View File

@@ -0,0 +1,6 @@
---
category: newQuery
---
* A new query "Improper Verification of Intent by Broadcast Receiver" (`java/improper-intent-verification`) has been added.
This query finds instances of Android `BroadcastReceiver`s that don't verify the action string of received Intents when registered
to receive system intents.