Java: WebView setAllowContentAccess query test cases

Author: egregius313

java/ql/test/query-tests/security/CWE-200/semmle/tests/WebViewContentAccess.expected

@@ -0,0 +1 @@
+| WebViewContentAccess.java:10:9:10:44 | setAllowContentAccess(...) | Sensitive information may be exposed via a malicious link due to access of content:// links being permitted. |

java/ql/test/query-tests/security/CWE-200/semmle/tests/WebViewContentAccess.java

@@ -0,0 +1,18 @@
+package com.example.test;
+
+import android.webkit.WebView;
+import android.webkit.WebSettings;
+
+public class WebViewContentAccess {
+    void configureWebViewUnsafe(WebView view) {
+        WebSettings settings = view.getSettings();
+
+        settings.setAllowContentAccess(true);
+    }
+
+    void configureWebViewSafe(WebView view) {
+        WebSettings settings = view.getSettings();
+
+        settings.setAllowContentAccess(false);
+    }
+}

java/ql/test/query-tests/security/CWE-200/semmle/tests/WebViewContentAccess.qlref

@@ -0,0 +1 @@
+Security/CWE/CWE-200/AndroidWebViewSettingsContentAccess.ql