mirror of
https://github.com/github/codeql.git
synced 2026-04-30 19:26:02 +02:00
Added severity
Removed duplicated code
This commit is contained in:
@@ -51,9 +51,6 @@ private class IntentFlagsOrDataChangedSanitizer extends IntentUriPermissionManip
|
||||
TaintTracking::localExprTaint(any(GrantWriteUriPermissionFlag f).getAnAccess(),
|
||||
ma.getArgument(0))
|
||||
or
|
||||
ma.getMethod() = m and
|
||||
m.getDeclaringType() instanceof TypeIntent and
|
||||
this.asExpr() = ma.getQualifier() and
|
||||
m.hasName("setFlags") and
|
||||
not TaintTracking::localExprTaint(any(GrantUriPermissionFlag f).getAnAccess(),
|
||||
ma.getArgument(0))
|
||||
|
||||
@@ -5,6 +5,7 @@
|
||||
* arbitrary Content Providers that are accessible by the vulnerable application.
|
||||
* @kind path-problem
|
||||
* @problem.severity error
|
||||
* @security-severity 7.8
|
||||
* @precision high
|
||||
* @id java/android/intent-uri-permission-manipulation
|
||||
* @tags security
|
||||
|
||||
Reference in New Issue
Block a user