Vyacheslav Gerasimov
24 lines
1.2 KiB
Plaintext
Vendored
24 lines
1.2 KiB
Plaintext
Vendored
// INSPECTION_CLASS: com.android.tools.idea.lint.AndroidLintSetJavaScriptEnabledInspection
|
|
|
|
import android.annotation.SuppressLint
|
|
import android.app.Activity
|
|
import android.webkit.WebView
|
|
|
|
@Suppress("UsePropertyAccessSyntax", "UNUSED_VARIABLE", "unused", "UNUSED_PARAMETER", "DEPRECATION")
|
|
public class HelloWebApp : Activity() {
|
|
|
|
fun test(webView: WebView) {
|
|
<warning descr="Using `setJavaScriptEnabled` can introduce XSS vulnerabilities into your application, review carefully.">webView.settings.javaScriptEnabled</warning> = true // bad
|
|
<warning descr="Using `setJavaScriptEnabled` can introduce XSS vulnerabilities into your application, review carefully.">webView.getSettings().setJavaScriptEnabled(true)</warning> // bad
|
|
webView.getSettings().setJavaScriptEnabled(false) // good
|
|
webView.loadUrl("file:///android_asset/www/index.html")
|
|
}
|
|
|
|
@SuppressLint("SetJavaScriptEnabled")
|
|
fun suppressed(webView: WebView) {
|
|
webView.getSettings().javaScriptEnabled = true; // bad
|
|
webView.getSettings().setJavaScriptEnabled(true) // bad
|
|
webView.getSettings().setJavaScriptEnabled(false); // good
|
|
webView.loadUrl("file:///android_asset/www/index.html");
|
|
}
|
|
} |