Added 1 new XPath based template for exported providers and 3 new templates for webview file access (detect in java sources)

This commit is contained in:
7h3b4dger
2025-11-06 15:32:19 +01:00
parent 83373109c9
commit cab3ba7a4b
4 changed files with 107 additions and 0 deletions

View File

@@ -0,0 +1,27 @@
id: webview-file-access-java
info:
name: Android File Access - Detect in Java sources
author: 7h3b4dger
severity: info
description: Android WebView File Access enabling was detected - Java source version.
tags: android,file,webview
file:
- extensions:
- java
matchers-condition: and
matchers:
- type: word
words: ["setAllowFileAccess(true)"]
- type: regex
part: body
regex:
- package\s+(?:.*)
extractors:
- type: regex
part: body
name: package
group: 1
regex:
- (?m)^\s*package\s+([A-Za-z_][A-Za-z0-9_\.]*)\s*;