File tree Expand file tree Collapse file tree 1 file changed +7
-7
lines changed
java/ql/src/Security/CWE/CWE-079 Expand file tree Collapse file tree 1 file changed +7
-7
lines changed Original file line number Diff line number Diff line change 44<qhelp >
55 <overview >
66 <p >
7- The <code >addJavascriptInterface</code > method of
7+ Calling the <code >addJavascriptInterface</code > method of
88 the <code >android.webkit.WebView</code > class allows the web pages of a
9- WebView to access methods of a Java object via JavaScript.
9+ WebView to access a Java object's methods via JavaScript.
1010 </p >
1111
1212 <p >
13- Objects exposed to Javascript are available in all frames of the
13+ Objects exposed to JavaScript are available in all frames of the
1414 WebView.
1515 </p >
1616 </overview >
1717
1818 <recommendation >
1919 <p >
20- If you need to expose Java objects with Javascript, you should guarantee
21- that no untrusted third party content is loaded into the WebView.
20+ If you need to expose Java objects to JavaScript, guarantee that no
21+ untrusted third- party content is loaded into the WebView.
2222 </p >
2323 </recommendation >
2424
2525 <example >
2626 <p >
27- In the following (bad) example, a Java object is exposed to Javascript .
27+ In the following (bad) example, a Java object is exposed to JavaScript .
2828 </p >
2929
3030 <sample src =" AndroidWebViewAddJavascriptInterfaceExample.java" />
3333
3434 <references >
3535 <li >
36- Android Documentation<a href =" https://developer.android.com/reference/android/webkit/WebView#addJavascriptInterface(java.lang.Object" >addJavascriptInterface</a >
36+ Android Documentation: <a href =" https://developer.android.com/reference/android/webkit/WebView#addJavascriptInterface(java.lang.Object,%20java.lang.String) " >addJavascriptInterface</a >
3737 </li >
3838 </references >
3939
You can’t perform that action at this time.
0 commit comments