mirror of
https://github.com/github/codeql.git
synced 2026-06-18 11:21:07 +02:00
Documentation cleanup for allowBackup query
This commit is contained in:
@@ -1,6 +1,6 @@
|
||||
/**
|
||||
* @name Android allowBackup attribute enabled
|
||||
* @description
|
||||
* @description Android manifests which do not disable the `android:allowBackup` attribute allow backups, which can store sensitive information.
|
||||
* @kind problem
|
||||
* @problem.severity recommendation
|
||||
* @security-severity 7.5
|
||||
@@ -17,8 +17,11 @@ from AndroidApplicationXmlElement androidAppElem
|
||||
where
|
||||
not androidAppElem.getFile().(AndroidManifestXmlFile).isInBuildDirectory() and
|
||||
(
|
||||
// explicitly sets android:allowBackup=true
|
||||
androidAppElem.allowsBackupExplicitly()
|
||||
or
|
||||
// Manifest providing the main intent for an application, and does not explicitly
|
||||
// disallow the allowBackup attribute
|
||||
androidAppElem.providesMainIntent() and
|
||||
androidAppElem.allowsBackup()
|
||||
)
|
||||
|
||||
Reference in New Issue
Block a user