Remove http(s) literal sources

egregius313 · egregius313 · commit f03e90f89467 · 2023-03-08T12:12:10.000-05:00
diff --git a/java/ql/src/Security/CWE/CWE-094/ArbitraryAPKInstallation.ql b/java/ql/src/Security/CWE/CWE-094/ArbitraryAPKInstallation.ql
@@ -67,7 +67,7 @@ class ExternalApkSource extends DataFlow::Node {
   ExternalApkSource() {
     sourceNode(this, "android-external-storage-dir") or
     this.asExpr().(MethodAccess).getMethod() instanceof UriConstructorMethod or
-    this.asExpr().(StringLiteral).getValue().matches(["file://%", "http://%", "https://%"])
+    this.asExpr().(StringLiteral).getValue().matches("file://%")
   }
 }
 

Original file line number	Diff line number	Diff line change
`@@ -67,7 +67,7 @@ class ExternalApkSource extends DataFlow::Node {`
`67`	`67`	`ExternalApkSource() {`
`68`	`68`	`sourceNode(this, "android-external-storage-dir") or`
`69`	`69`	`this.asExpr().(MethodAccess).getMethod() instanceof UriConstructorMethod or`
`70`		`- this.asExpr().(StringLiteral).getValue().matches(["file://%", "http://%", "https://%"])`
	`70`	`+ this.asExpr().(StringLiteral).getValue().matches("file://%")`
`71`	`71`	`}`
`72`	`72`	`}`
`73`	`73`