Skip to content

Commit

Permalink
Fix for issue #25
Browse files Browse the repository at this point in the history
With time I'll add more components to this map
  • Loading branch information
mzfr authored and mzfr committed Oct 18, 2020
1 parent 1f7c8c5 commit 50589ac
Showing 1 changed file with 11 additions and 0 deletions.
11 changes: 11 additions & 0 deletions main.go
Original file line number Diff line number Diff line change
Expand Up @@ -22,6 +22,11 @@ var (
banner bool
)

// NotVulnerable exported
var NotVulnerable = map[string]bool{
"net.openid.appauth.RedirectUriReceiverActivity": true,
}

func init() {
flag.Usage = func() {
h := []string{
Expand Down Expand Up @@ -116,6 +121,12 @@ func getIntents(intentFilters []*etree.Element) {
func exported(component *etree.Element) {
exported := component.SelectAttrValue("android:exported", "none")
activityName := component.SelectAttrValue("android:name", "name not defined")
// If the activity is present in unhackable
// kind of list then no point in reporting it
// see issue #25 on github.com/mzfr/slicer
if NotVulnerable[activityName] {
return
}
permission := component.SelectAttrValue("android:permission", "null")
acitvityCode := strings.ReplaceAll(activityName, ".", "/")

Expand Down

0 comments on commit 50589ac

Please sign in to comment.