Skip to content

Commit df1a4d2

Browse files
committed
Documentation fix: Add state1 and state2 to documentation
1 parent 68392aa commit df1a4d2

File tree

1 file changed

+3
-0
lines changed

1 file changed

+3
-0
lines changed

java/ql/src/Security/CWE/CWE-200/AndroidWebViewSettingsPermitsContentAccess.ql

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -71,6 +71,9 @@ class WebViewDisallowContentAccessConfiguration extends TaintTracking::Configura
7171
/**
7272
* Holds if the step from `node1` to `node2` is a dataflow step that gets the `WebSettings` object
7373
* from the `getSettings` method of a `WebView` object.
74+
*
75+
* This step is only valid when `state1` is empty and `state2` indicates that the `WebSettings` object
76+
* has been accessed.
7477
*/
7578
override predicate isAdditionalTaintStep(
7679
DataFlow::Node node1, DataFlow::FlowState state1, DataFlow::Node node2,

0 commit comments

Comments
 (0)