Explore

Filters (0) Clear filters
Languages
Level
Tags

1-19 of 19

Android WebView best practices: Disable Content Access

Enabling content access in the webview could lead to misuse

  • error
  • java
  • security
  • framework specific
  • Android
  • mobile
  • Android security set
Android WebView best practices: Disable Content Access (setter)

Enabling content access in the webview could lead to misuse

  • error
  • java
  • security
  • framework specific
  • Android
  • mobile
  • Android security set
Android WebView best practices: Insecure mixed content mode

Insecure content may be allowed to be loaded by a secure origin

  • error
  • java
  • security
  • framework specific
  • Android
  • mobile
  • Android security set
Android WebView best practices: Insecure settings

Enabling this WebView setting has security implications

  • warning
  • java
  • security
  • framework specific
  • Android
  • mobile
  • Android security set
Android WebView best practices: Set mixed content mode

WebView setting with security implications

  • error
  • java
  • security
  • framework specific
  • Android
  • mobile
  • Android security set
Data Protection: Avoid Data Exposure - Avoid Device Protected Storage - Compliant

Compliant

  • compliant
  • java
  • security
  • framework specific
  • mobile
  • Android
  • Android security set
Data Protection - Secure Data Display: Avoid Data Exposure: set FLAG_SECURE

Could leak sensitive information

  • error
  • java
  • security
  • mobile
  • framework specific
  • Android
  • Android security set
Data Protection - Secure Data Display: Avoid Data Exposure: Use FlagSecureHelper to create toasts

Could lead to Data Exposure

  • error
  • java
  • security
  • framework specific
  • mobile
  • Android
  • Android security set
Data Protection - Secure Data Display: Avoid Data Exposure: Use FlagSecureHelper to create toasts Compliant

Could lead to Data Exposure - Compliant

  • compliant
  • java
  • security
  • framework specific
  • mobile
  • Android
  • Android security set
Insecure Data Storage: Use SQLCipher Database (all other methods)

SQLite Databases are an insecure means of storage

  • warning
  • java
  • security
  • framework specific
  • mobile
  • Android
  • SQL
  • Android security set
Insecure Data Storage: Use SQLCipher Database (creation)

SQLite Databases are an insecure means of storage

  • warning
  • java
  • security
  • framework specific
  • mobile
  • Android
  • SQL
  • Android security set
SQL Injection: SQLiteQueryBuilder compileStatement Compliant

SQL Injection: SQLiteQueryBuilder compileStatement - Compliant

  • compliant
  • java
  • security
  • framework specific
  • mobile
  • injection
  • Android
  • SQL
  • Android security set
  • OWASP Top 10
Storage best practices: insecure operating mode

When using this value other applications will have access to your application's data

  • error
  • java
  • security
  • framework specific
  • mobile
  • Android
  • Android security set
WebView Best Practices: Disable File Access (constructor)

Enabling file access in the webview could lead to misuse

  • error
  • java
  • security
  • framework specific
  • Android
  • mobile
  • Android security set
WebView Best Practices: Disable File Access (setter)

Enabling file access in the webview could lead to misuse

  • error
  • java
  • security
  • framework specific
  • Android
  • mobile
  • Android security set
WebView best practices: Disable Geolocation (constructor)

Enabling geolocation in the webview could lead to data exposure

  • error
  • java
  • security
  • framework specific
  • Android
  • mobile
  • Android security set
WebView best practices: Disable Geolocation (setter)

Enabling geolocation in the webview could lead to data exposure

  • error
  • java
  • security
  • framework specific
  • Android
  • mobile
  • Android security set
WebView best practices: Disable JavaScript (constructor)

Enabling JavaScript in the webview could lead to XSS

  • error
  • java
  • security
  • framework specific
  • Android
  • mobile
  • Android security set
WebView best practices: Disable JavaScript (setter)

Enabling JavaScript in the webview could lead to XSS

  • error
  • java
  • security
  • framework specific
  • Android
  • mobile
  • Android security set