diff options
| author | Selim Gurun <sgurun@google.com> | 2014-01-10 16:24:00 -0800 |
|---|---|---|
| committer | Selim Gurun <sgurun@google.com> | 2014-01-11 01:18:50 +0000 |
| commit | 7719d6ca3fd4079add8a9648838d99244a237eaf (patch) | |
| tree | 6ad7033ec9d43db5f24c3444789716d2ce84255a | |
| parent | bc681880294a2e31a1325101917b6e36fd411bde (diff) | |
| download | Browser-7719d6ca3fd4079add8a9648838d99244a237eaf.tar.gz | |
DO NOT MERGE Do not let intents request viewing private browser files
Bug: 9793586
Change-Id: I8f6f03b05556ee4d6846c15752de9be54c003060
(cherry picked from commit 348cca6c61e1ad3f2d580298d9ec5f1826f64269)
| -rw-r--r-- | src/com/android/browser/IntentHandler.java | 7 |
1 files changed, 7 insertions, 0 deletions
diff --git a/src/com/android/browser/IntentHandler.java b/src/com/android/browser/IntentHandler.java index e22c5dc9..8b3ff1e8 100644 --- a/src/com/android/browser/IntentHandler.java +++ b/src/com/android/browser/IntentHandler.java @@ -107,6 +107,13 @@ public class IntentHandler { urlData = new UrlData(mSettings.getHomePage()); } + // If url is to view private data files, don't allow. + Uri uri = intent.getData(); + if (uri != null && uri.getScheme().startsWith("file") && + uri.getPath().startsWith(mActivity.getDatabasePath("foo").getParent())) { + return; + } + if (intent.getBooleanExtra(Browser.EXTRA_CREATE_NEW_TAB, false) || urlData.isPreloaded()) { Tab t = mController.openTab(urlData); |