hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-29 02:35:15 +02:00
Code Issues Packages Projects Releases Wiki Activity

Change wording from "permit" to "allow" in id and name

Browse Source
This commit is contained in:
Ed Minnix
2023-01-09 10:03:12 -05:00
parent 972b4629c8
commit f626d4794a
2 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
java/ql/src/Security/CWE/CWE-200/AndroidWebViewSettingsPermitsContentAccess.ql
View File

@@ -1,7 +1,7 @@
/**
* @name Android WebView settings permits content access
* @id java/android/websettings-permit-contentacces
* @description Access to content providers in a WebView can permit access to protected information by loading content:// links.
* @name Android WebView settings allows access to content links
* @id java/android/websettings-allow-content-access
* @description Access to content providers in a WebView can allow access to protected information by loading content:// links.
* @kind problem
* @problem.severity warning
* @precision medium

2
java/ql/src/change-notes/2022-12-21-android-allowcontentaccess-query.md
View File

@@ -1,4 +1,4 @@
---
category: newQuery
---
* Added a new query `java/android/websettings-permit-contentacces` to detect Android WebViews which do not disable access to `content://` urls.
* Added a new query `java/android/websettings-allow-content-access` to detect Android WebViews which do not disable access to `content://` urls.