We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 55090ec commit 1c81f8dCopy full SHA for 1c81f8d
java/ql/src/Security/CWE/CWE-079/AndroidWebViewSettingsEnabledJavaScript.qhelp
@@ -4,9 +4,9 @@
4
<qhelp>
5
<overview>
6
<p>
7
- Enabling JavaScript in an Android WebView allows for the running of JavaScript
8
- code in the context of the running application. This opens the possibility for
9
- cross-site scripting if the attacker can inject arbitrary JavaScript.
+ Enabling JavaScript in an Android WebView allows the execution of
+ JavaScript code in the context of the running application. This creates a
+ cross-site scripting vulnerability.
10
</p>
11
12
0 commit comments