lkna

I see. I will try that. About the reachability analysis, 1. Is it better to use InterproceduralSuperSpark or AndroidReachingFactsAnalysis? 2. I want to confirm this, after I made the IDFG...

I see, my approach was to locate the sink method that use the URL, and then check whether that particular method is reachable or not. One last thing I want...

Got it. It seems using AndroidReachingFactsAnalysis takes more time than using InterProceduralSuperSpark. Thank you for your response, that's so helpful.

Another question about the source sink analysis. I used the AndroidUrlCollector to get all the URL and it seems there URL which was found by the AndroidUrlCollector but was not...

Here is the screenshot of the jawa IR  The URL string http://www.m4rc3lv.nl/pub/reisgids/reisgids.html?lat= is used as the parameter of the StringBuilder and it is...

I see. Not getting the full URL is OK for me, as long as I can get the information of what kind of sink API uses the baseURL (in this...

Great! Thank you, you are really helpful.

For the sink, I currently i mark the sink by checking the signature, e.g.: if(sig == new Signature("Landroid/webkit/WebView;.loadUrl:(Ljava/lang/String;)V")) Another thing I want to ask, is it possible to determine a...