Remove http(s) literal sources

2026-04-24 00:05:14 +02:00 · 2023-01-25 12:11:26 -05:00
parent 839b88a4bc
commit f03e90f894
1 changed files with 1 additions and 1 deletions
--- a/java/ql/src/Security/CWE/CWE-094/ArbitraryAPKInstallation.ql
+++ b/java/ql/src/Security/CWE/CWE-094/ArbitraryAPKInstallation.ql
@@ -67,7 +67,7 @@ class ExternalApkSource extends DataFlow::Node {
  ExternalApkSource() {
    sourceNode(this, "android-external-storage-dir") or
    this.asExpr().(MethodAccess).getMethod() instanceof UriConstructorMethod or
-    this.asExpr().(StringLiteral).getValue().matches(["file://%", "http://%", "https://%"])
+    this.asExpr().(StringLiteral).getValue().matches("file://%")
  }
 }