Thanks to visit codestin.com Credit goes to github.com
We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent a6f2ebe commit 5f0ce4dCopy full SHA for 5f0ce4d
1 file changed
java/ql/src/Security/CWE/CWE-940/AndroidIntentRedirection.qhelp
@@ -3,7 +3,7 @@
3
<overview>
4
<p>An exported Android component that obtains a user-provided Intent and uses it to launch another component
5
can be exploited to obtain access to private, unexported components of the same app or to launch other apps' components
6
- in behalf of the victim app.</p>
+ on behalf of the victim app.</p>
7
</overview>
8
<recommendation>
9
<p>Do not export compontents that start other components from a user-provided Intent.
0 commit comments