[DIFF-INFORMED] Swift: UnsafeWebViewFetch

d10c · d10c · commit 4342b2b799aa · 2025-07-17T14:59:09.000+02:00
https://github.com/d10c/codeql/blob/d10c/diff-informed-phase-3/swift/ql/src/queries/Security/CWE-079/UnsafeWebViewFetch.ql#L24
diff --git a/swift/ql/lib/codeql/swift/security/UnsafeWebViewFetchQuery.qll b/swift/ql/lib/codeql/swift/security/UnsafeWebViewFetchQuery.qll
@@ -28,6 +28,10 @@ module UnsafeWebViewFetchConfig implements DataFlow::ConfigSig {
   predicate isAdditionalFlowStep(DataFlow::Node nodeFrom, DataFlow::Node nodeTo) {
     any(UnsafeWebViewFetchAdditionalFlowStep s).step(nodeFrom, nodeTo)
   }
+
+  predicate observeDiffInformedIncrementalMode() {
+    none() // can't override location accurately because of secondary use in select.
+  }
 }
 
 /**

Original file line number	Diff line number	Diff line change
`@@ -28,6 +28,10 @@ module UnsafeWebViewFetchConfig implements DataFlow::ConfigSig {`
`28`	`28`	`predicate isAdditionalFlowStep(DataFlow::Node nodeFrom, DataFlow::Node nodeTo) {`
`29`	`29`	`any(UnsafeWebViewFetchAdditionalFlowStep s).step(nodeFrom, nodeTo)`
`30`	`30`	`}`
	`31`	`+`
	`32`	`+ predicate observeDiffInformedIncrementalMode() {`
	`33`	`+ none() // can't override location accurately because of secondary use in select.`
	`34`	`+ }`
`31`	`35`	`}`
`32`	`36`
`33`	`37`	`/**`