hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-26 09:15:12 +02:00
Code Issues Packages Projects Releases Wiki Activity

Add sink models to notification builder setters

Browse Source
This commit is contained in:
Joe Farebrother
2024-01-11 14:36:12 +00:00
parent cd19a91704
commit f9bb004618
4 changed files with 106 additions and 12 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
java/ql/test/query-tests/security/CWE-200/semmle/tests/SensitiveNotification/Test.java
View File

@@ -1,13 +1,16 @@
import android.app.Activity;
import android.app.Notification;
import androidx.core.app.NotificationCompat;
import androidx.core.app.NotificationManagerCompat;
class Test extends Activity {
void test(String password) {
NotificationManagerCompat manager = NotificationManagerCompat.from(this);
NotificationCompat.Builder builder = new NotificationCompat.Builder(this, "");
builder.setContentText(password);
manager.notify(0, builder.build()); // sensitive-notification
builder.setContentText(password); // $sensitive-notification
}
void test2(String password) {
Notification.Builder builder = new Notification.Builder(this, "");
builder.setContentText(password); // $sensitive-notification
}
}