Java: WebView file access query description

2026-04-29 10:45:15 +02:00 · 2022-11-12 10:01:30 -05:00
parent b9c2ee75be
commit ea358f0698
1 changed files with 1 additions and 0 deletions
--- a/java/ql/src/Security/CWE/CWE-200/AndroidWebViewSettingsFileAccess.ql
+++ b/java/ql/src/Security/CWE/CWE-200/AndroidWebViewSettingsFileAccess.ql
@@ -1,6 +1,7 @@
 /**
 * @name Android WebSettings file access
 * @kind problem
+ * @description Enabling access to the file system in a WebView can enable access to sensitive information.
 * @id java/android-websettings-file-access
 * @problem.severity warning
 * @security-severity 6.5