Class AndroidSqlInjectionDetector
- java.lang.Object
-
- com.h3xstream.findsecbugs.injection.AbstractTaintDetector
-
- com.h3xstream.findsecbugs.injection.AbstractInjectionDetector
-
- com.h3xstream.findsecbugs.injection.BasicInjectionDetector
-
- com.h3xstream.findsecbugs.injection.sql.AndroidSqlInjectionDetector
-
- All Implemented Interfaces:
edu.umd.cs.findbugs.Detector,edu.umd.cs.findbugs.Priorities
public class AndroidSqlInjectionDetector extends BasicInjectionDetector
-
-
Field Summary
Fields Modifier and Type Field Description static String[]CONTENT_PROVIDER_TYPES-
Fields inherited from class com.h3xstream.findsecbugs.injection.AbstractInjectionDetector
injectionSinks
-
Fields inherited from class com.h3xstream.findsecbugs.injection.AbstractTaintDetector
bugReporter
-
-
Constructor Summary
Constructors Constructor Description AndroidSqlInjectionDetector(edu.umd.cs.findbugs.BugReporter bugReporter)
-
Method Summary
All Methods Instance Methods Concrete Methods Modifier and Type Method Description protected intgetPriority(Taint taint)The default implementation ofgetPriority()can be overridden if the severity and the confidence for risk is particular.-
Methods inherited from class com.h3xstream.findsecbugs.injection.BasicInjectionDetector
addParsedInjectionPoint, getInjectionPoint, loadConfiguredSinks, loadConfiguredSinks, loadCustomSinks, loadCustomSinksConfigFiles, loadSink, registerVisitor
-
Methods inherited from class com.h3xstream.findsecbugs.injection.AbstractInjectionDetector
analyzeLocation, getPriorityFromTaintFrame, report
-
Methods inherited from class com.h3xstream.findsecbugs.injection.AbstractTaintDetector
analyzeMethod, shouldAnalyzeClass, visitClassContext
-
-
-
-
Field Detail
-
CONTENT_PROVIDER_TYPES
public static final String[] CONTENT_PROVIDER_TYPES
-
-
Method Detail
-
getPriority
protected int getPriority(Taint taint)
Description copied from class:AbstractInjectionDetectorThe default implementation ofgetPriority()can be overridden if the severity and the confidence for risk is particular. By default, injection will be rated "High" if the complete link between source and sink is made. If it is not the case but concatenation with external source is made, "Medium" is used.- Overrides:
getPriorityin classAbstractInjectionDetector- Parameters:
taint- Detail about the state of the value passed (Cumulative information leading to the variable passed).- Returns:
- Priorities interface values from 1 to 5 (Enum-like interface)
-
-