Module FragmentInjection

Provides classes and predicates to reason about Android Fragment injection vulnerabilities.

Import path

import semmle.code.java.security.FragmentInjection

java	Provides all default Java QL imports.

FragmentInjectionAdditionalTaintStep	An additional taint step for flows related to Fragment injection vulnerabilites.
FragmentInjectionSanitizer	A sanitizer for Fragment injection vulnerabilities.
FragmentInjectionSink	A sink for Fragment injection vulnerabilities, that is, method calls that dynamically add fragments to activities.
IsValidFragmentMethod	The method `isValidFragment` of the class `android.preference.PreferenceActivity`.