rspec/rules/S6384/description.adoc
github-actions[bot] 19cafdcdbc
Create rule S6384[Java]: Components should not be vulnerable to intent redirection (#597)
* Create rule S6384

* init rule s6384

Co-authored-by: eric-therond-sonarsource <eric-therond-sonarsource@users.noreply.github.com>
Co-authored-by: eric-therond-sonarsource <eric.therond@sonarsource.com>
Co-authored-by: Roberto Orlandi <71495874+roberto-orlandi-sonarsource@users.noreply.github.com>
2022-01-12 08:09:15 +01:00

5 lines
308 B
Plaintext

Intent redirections are intents forwarded by a component to another component. It can lead to vulnerabilities such as leak of information when an exported component of the mobile app, like an activity, doesn't validate an untrusted intent used to start a component, ie to perform the intent redirection.