Skip to content

Commit a23b8a4

Browse files
atorralbasmowton
andauthored
Update java/ql/src/Security/CWE/CWE-470/FragmentInjection.inc.qhelp
Co-authored-by: Chris Smowton <[email protected]>
1 parent 6dfe0ce commit a23b8a4

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

java/ql/src/Security/CWE/CWE-470/FragmentInjection.inc.qhelp

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,7 @@
66
When fragments are instantiated with externally provided names, this exposes any exported activity that dynamically
77
creates and hosts the fragment to fragment injection. A malicious application could provide the
88
name of an arbitrary fragment, even one not designed to be externally accessible, and inject it into the activity.
9-
Thus, effectively bypassing access controls and exposing the application to unintended effects.
9+
This can bypass access controls and expose the application to unintended effects.
1010
</p>
1111
<p>
1212
Fragments are reusable parts of an Android application's user interface.

0 commit comments

Comments
 (0)