Skip to content

0.5.1.md

Latest commit

 

History

History
9 lines (5 loc) · 848 Bytes

0.5.1.md

File metadata and controls

9 lines (5 loc) · 848 Bytes

0.5.1

New Queries

  • Added a new query java/android/websettings-allow-content-access to detect Android WebViews which do not disable access to content:// urls.

Minor Analysis Improvements

  • The name, description and alert message for the query java/concatenated-sql-query have been altered to emphasize that the query flags the use of string concatenation to construct SQL queries, not the lack of appropriate escaping. The query's files have been renamed from SqlUnescaped.ql and SqlUnescapedLib.qll to SqlConcatenated.ql and SqlConcatenatedLib.qll respectively; in the unlikely event your custom configuration or queries refer to either of these files by name, those references will need to be adjusted. The query id remains java/concatenated-sql-query, so alerts should not be re-raised as a result of this change.