[DIFF-INFORMED] Java: AndroidWebViewSettingsAllowsContentAccess

d10c · d10c · commit b5c521d84edc · 2025-07-17T14:30:02.000+02:00
diff --git a/java/ql/src/Security/CWE/CWE-200/AndroidWebViewSettingsAllowsContentAccess.ql b/java/ql/src/Security/CWE/CWE-200/AndroidWebViewSettingsAllowsContentAccess.ql
@@ -97,6 +97,10 @@ module WebViewDisallowContentAccessConfig implements DataFlow::StateConfigSig {
     state instanceof IsSettings and
     node instanceof WebSettingsDisallowContentAccessSink
   }
+
+  predicate observeDiffInformedIncrementalMode() {
+    none() // only used negatively
+  }
 }
 
 module WebViewDisallowContentAccessFlow =

Original file line number	Diff line number	Diff line change
`@@ -97,6 +97,10 @@ module WebViewDisallowContentAccessConfig implements DataFlow::StateConfigSig {`
`97`	`97`	`state instanceof IsSettings and`
`98`	`98`	`node instanceof WebSettingsDisallowContentAccessSink`
`99`	`99`	`}`
	`100`	`+`
	`101`	`+ predicate observeDiffInformedIncrementalMode() {`
	`102`	`+ none() // only used negatively`
	`103`	`+ }`
`100`	`104`	`}`
`101`	`105`
`102`	`106`	`module WebViewDisallowContentAccessFlow =`