CodeQL library for Java
codeql/java-all 0.4.0-dev (changelog, source)

Member predicate OnActivityResultIncomingIntent::isRemoteSource

Holds if this node is a remote flow source.

This is only a source when the Activity or Fragment that implements onActivityResult is also using an implicit Intent to start another Activity with startActivityForResult. This means that a malicious application can intercept it to start itself and return an arbitrary Intent to onActivityResult.

predicate isRemoteSource()