mirror of
https://github.com/github/codeql.git
synced 2026-03-05 23:26:51 +01:00
4810657515
This is an error for the Docs content linter and does not match the style guide for query help.
21 lines
672 B
Plaintext
21 lines
672 B
Plaintext
/**
|
|
* @name Exposure of sensitive information to UI text views
|
|
* @id java/android/sensitive-text
|
|
* @kind path-problem
|
|
* @description Sensitive information displayed in UI text views should be properly masked.
|
|
* @problem.severity warning
|
|
* @precision medium
|
|
* @security-severity 6.5
|
|
* @tags security
|
|
* external/cwe/cwe-200
|
|
*/
|
|
|
|
import java
|
|
import java
|
|
import semmle.code.java.security.SensitiveUiQuery
|
|
import TextFieldTracking::PathGraph
|
|
|
|
from TextFieldTracking::PathNode source, TextFieldTracking::PathNode sink
|
|
where TextFieldTracking::flowPath(source, sink)
|
|
select sink, source, sink, "This $@ is exposed in a text view.", source, "sensitive information"
|