Page Information

Title:	DRD13. Do not provide addJavascriptInterface method access in a WebView which could contain untrusted content. (API level JELLY_BEAN or below)
Author:	Fred Long	Jan 22, 2014
Last Changed by:	Amy Gale	Mar 13, 2025
Tiny Link: (useful for email)	https://wiki.sei.cmu.edu/confluence/x/fdAxBQ
Export As:	Word · PDF

Android (1)     Page: CodeSonar

Parent Page     Page: Rule 03. WebView (WBV)

• general
• incomplete
• rule
• android-applicable
• wbv
• version-16
• android-version-applicability
• version-1
• drd
• draft

Time	Editor
Mar 13, 2025 17:28	Amy Gale	View Changes
Added entry for CodeSonar warning class mapping
Mar 12, 2025 14:52	David Svoboda	View Changes
Apr 08, 2015 19:49	Unknown User (lflynn)	View Changes
Jun 26, 2014 16:22	Will Snavely	View Changes
Jun 26, 2014 16:18	Will Snavely

External Links (7)
    https://www.securecoding.cert.org/confluence/display/java/S…
    https://www.securecoding.cert.org/confluence/pages/viewpage…
    developer.android.com/reference/android/webkit/WebView.html
    https://www.securecoding.cert.org/confluence/display/java/D…
    https://www.securecoding.cert.org/confluence/display/java/D…
    https://www.securecoding.cert.org/confluence/display/java/T…
    developer.android.com/guide/topics/manifest/uses-sdk-elemen…

Android (2)     Page: CodeSonar_V     Page: CodeSonar

SEI CERT Oracle Coding Standard for Java (2)     Home page: SEI CERT Oracle Coding Standard for Java     Page: Rule AA. References