Skip to content

Commit 8ec5b5b

Browse files
egregius313jcogs33
andcommitted
Apply suggestions from code review
Co-authored-by: Jami <[email protected]>
1 parent 8fcf00b commit 8ec5b5b

File tree

3 files changed

+6
-6
lines changed

3 files changed

+6
-6
lines changed

java/ql/src/Security/CWE/CWE-094/ArbitraryAPKInstallation.qhelp

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -58,16 +58,16 @@
5858

5959
<references>
6060
<li>
61-
Intent.ACTION_INSTALL_PACKAGE: <a href="https://developer.android.com/reference/android/content/Intent#ACTION_INSTALL_PACKAGE"></a>.
61+
Android Developers: <a href="https://developer.android.com/reference/android/content/Intent#ACTION_INSTALL_PACKAGE">Intent.ACTION_INSTALL_PACKAGE</a>.
6262
</li>
6363
<li>
64-
Android Manifest Permission to Install Packages: <a href="https://developer.android.com/reference/android/Manifest.permission#REQUEST_INSTALL_PACKAGES"></a>.
64+
Android Developers: <a href="https://developer.android.com/reference/android/Manifest.permission#REQUEST_INSTALL_PACKAGES">Manifest.permission.REQUEST_INSTALL_PACKAGES</a>.
6565
</li>
6666
<li>
67-
PackageInstaller: <a href="https://developer.android.com/reference/android/content/pm/PackageInstaller"></a>.
67+
Android Developers: <a href="https://developer.android.com/reference/android/content/pm/PackageInstaller">PackageInstaller</a>.
6868
</li>
6969
<li>
70-
FileProvider: <a href="https://developer.android.com/reference/androidx/core/content/FileProvider"></a>.
70+
Android Developers: <a href="https://developer.android.com/reference/androidx/core/content/FileProvider">FileProvider</a>.
7171
</li>
7272
</references>
7373
</qhelp>

java/ql/src/Security/CWE/CWE-094/ArbitraryAPKInstallation.ql

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -71,7 +71,7 @@ class SetDataSink extends DataFlow::ExprNode {
7171
/** A method that generates a URI. */
7272
class UriConstructorMethod extends Method {
7373
UriConstructorMethod() {
74-
this.hasQualifiedName("android.net", "Uri", [/*"parse",*/ "fromFile", "fromParts"]) or
74+
this.hasQualifiedName("android.net", "Uri", ["fromFile", "fromParts"]) or
7575
this.hasQualifiedName("androidx.core.content", "FileProvider", "getUriForFile")
7676
}
7777
}
Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
---
22
category: newQuery
33
---
4-
* Added a new query `java/android/arbitrary-apk-installation` to detect installation of APKs from untrusted sources.
4+
* Added a new query, `java/android/arbitrary-apk-installation`, to detect installation of APKs from untrusted sources.
55

0 commit comments

Comments
 (0)