Skip to content

Commit 2fb9536

Browse files
committed
Java: documentation cleanup for WebView file access query
1 parent 7a0544d commit 2fb9536

File tree

1 file changed

+2
-14
lines changed

1 file changed

+2
-14
lines changed

java/ql/src/Security/CWE/CWE-200/AndroidWebViewSettingsFileAccess.qhelp

Lines changed: 2 additions & 14 deletions
Original file line numberDiff line numberDiff line change
@@ -6,8 +6,8 @@
66
<p>
77
File access in an Android WebView can expose the device's file system to
88
the JavaScript running in the WebView. If there are vulnerabilities in the
9-
JavaScript, file access may allow an attacker to access or steal the
10-
user's data.
9+
JavaScript or untrusted content is loaded in the WebView, file access may
10+
allow an attacker to access or steal the user's data.
1111
</p>
1212
</overview>
1313

@@ -40,18 +40,6 @@
4040
<li>
4141
Android documentation: <a href="https://developer.android.com/reference/android/webkit/WebSettings#setAllowFileAccessFromFileURLs(boolean)">WebSettings.setAllowFileAccessFromFileURLs</a>.
4242
</li>
43-
<li>
44-
Android documentation: <a href="https://developer.android.com/reference/android/webkit/WebSettings#setAllowUniversalAccessFromFileURLs(boolean)">WebSettings.setAllowUniversalAccessFromFileURLs</a>.
45-
</li>
46-
<li>
47-
File access from URLs is enabled for WebView: <a href="https://oversecured.com/vulnerabilities#Android/File_access_from_file_URLs_is_enabled_for_WebView">File access for URLs is enabled for WebView</a>.
48-
</li>
49-
<li>
50-
File access is enabled for WebView: <a href="https://oversecured.com/vulnerabilities#Android/File_access_is_enabled_for_WebView">File access is enabled for WebView</a>.
51-
</li>
52-
<li>
53-
Universal file access from file URLs is enabled for WebView: <a href="https://oversecured.com/vulnerabilities#Android/Universal_file_access_from_file_URLs_is_enabled_for_WebView">Universal file access from file URLs is enabled for WebView</a>.
54-
</li>
5543
</references>
5644

5745
</qhelp>

0 commit comments

Comments
 (0)