File tree Expand file tree Collapse file tree 2 files changed +31
-0
lines changed
semmle/code/java/security Expand file tree Collapse file tree 2 files changed +31
-0
lines changed Original file line number Diff line number Diff line change
1
+ <!DOCTYPE qhelp PUBLIC "-//Semmle//qhelp//EN" "qhelp.dtd">
2
+ <qhelp >
3
+ <overview >
4
+ <p ></p >
5
+ </overview >
6
+ <recommendation >
7
+ <p ></p >
8
+ </recommendation >
9
+ <example >
10
+ <p ></p >
11
+ <sample src =" " />
12
+ </example >
13
+ <references >
14
+ <li >
15
+ <a href =" " ></a >
16
+ </li >
17
+ </references >
18
+ </qhelp >
Original file line number Diff line number Diff line change
1
+ /** Provides classes to reason about Androind Intent redirect vulnerabilities. */
2
+
1
3
import java
2
4
private import semmle.code.java.dataflow.DataFlow
3
5
private import semmle.code.java.frameworks.android.Intent
4
6
7
+ /**
8
+ * A sink for Intent redirect vulnerabilities in Android,
9
+ * that is, method calls that start Android components (like activities or services).
10
+ */
5
11
abstract class IntentRedirectSink extends DataFlow:: Node { }
6
12
13
+ /** A sanitizer for data used to start an Android component. */
7
14
abstract class IntentRedirectSanitizer extends DataFlow:: Node { }
8
15
16
+ /**
17
+ * A unit class for adding additional taint steps.
18
+ *
19
+ * Extend this class to add additional taint steps that should apply to `IntentRedirectConfiguration`.
20
+ */
9
21
class IntentRedirectAdditionalTaintStep extends Unit {
10
22
abstract predicate step ( DataFlow:: Node node1 , DataFlow:: Node node2 ) ;
11
23
}
12
24
25
+ /** Default sink for Intent redirect vulnerabilities. */
13
26
private class DefaultIntentRedirectSink extends IntentRedirectSink {
14
27
DefaultIntentRedirectSink ( ) {
15
28
exists ( MethodAccess ma , Method m |
You can’t perform that action at this time.
0 commit comments