Page Information

Title:	DRD13. Do not provide addJavascriptInterface method access in a WebView which could contain untrusted content. (API level JELLY_BEAN or below)
Author:	Fred Long	Jan 22, 2014
Last Changed by:	Unknown User (lflynn)	Apr 08, 2015
Tiny Link: (useful for email)	https://wiki.sei.cmu.edu/confluence/x/fdAxBQ
Export As:	Word · PDF

Parent Page     Page: Rule 03. WebView (WBV)

• general
• incomplete
• rule
• android-applicable
• wbv
• version-16
• android-version-applicability
• version-1
• drd
• draft

Time	Editor
Apr 08, 2015 19:49	Unknown User (lflynn)	View Changes
Jun 26, 2014 16:22	Will Snavely	View Changes
Jun 26, 2014 16:18	Will Snavely	View Changes
Jun 26, 2014 16:12	Will Snavely	View Changes
Jun 05, 2014 16:37	Unknown User (lflynn)
done with test

External Links (7)
    https://www.securecoding.cert.org/confluence/display/java/S…
    https://www.securecoding.cert.org/confluence/pages/viewpage…
    developer.android.com/reference/android/webkit/WebView.html
    https://www.securecoding.cert.org/confluence/display/java/D…
    https://www.securecoding.cert.org/confluence/display/java/D…
    https://www.securecoding.cert.org/confluence/display/java/T…
    developer.android.com/guide/topics/manifest/uses-sdk-elemen…

SEI CERT Oracle Coding Standard for Java (2)     Home page: SEI CERT Oracle Coding Standard for Java     Page: Rule AA. References