diff options
| author | Diego Perez <diegoperez@google.com> | 2022-06-24 15:43:33 +0000 |
|---|---|---|
| committer | Diego Perez <diegoperez@google.com> | 2022-07-05 08:42:11 +0000 |
| commit | da1af9da70530f5f93ca670f3d8ca0eb67b86fee (patch) | |
| tree | 33ec137ec2655a9a83ff49d40d96d19e1dfd54ca /android-test-framework | |
| parent | 0285548a600b7a522494a35ac80c6b2eaae1aea7 (diff) | |
| download | idea-da1af9da70530f5f93ca670f3d8ca0eb67b86fee.tar.gz | |
Fix path traversal in RenderSecurityManager
RenderSecurityManager would use not normalize paths allowing for
read/write operations to avoid the simple string checks.
Test: RenderSecurityManagerTest
Fixes: 236865896
Change-Id: I658aecfdea718f9297f5ac26219834651dd9cbc1
Diffstat (limited to 'android-test-framework')
| -rw-r--r-- | android-test-framework/testSrc/org/jetbrains/android/AndroidTestCase.java | 8 |
1 files changed, 0 insertions, 8 deletions
diff --git a/android-test-framework/testSrc/org/jetbrains/android/AndroidTestCase.java b/android-test-framework/testSrc/org/jetbrains/android/AndroidTestCase.java index 4c00de584e0..a339d12bdec 100644 --- a/android-test-framework/testSrc/org/jetbrains/android/AndroidTestCase.java +++ b/android-test-framework/testSrc/org/jetbrains/android/AndroidTestCase.java @@ -155,11 +155,6 @@ public abstract class AndroidTestCase extends AndroidTestBase { deleteManifest(); } - if (RenderSecurityManager.RESTRICT_READS) { - // Unit test class loader includes disk directories which security manager does not allow access to - RenderSecurityManager.sEnabled = false; - } - ArrayList<String> allowedRoots = new ArrayList<>(); collectAllowedRoots(allowedRoots); registerAllowedRoots(allowedRoots, getTestRootDisposable()); @@ -216,9 +211,6 @@ public abstract class AndroidTestCase extends AndroidTestBase { mySettings = null; getAndroidCodeStyleSettings().USE_CUSTOM_SETTINGS = myUseCustomSettings; - if (RenderSecurityManager.RESTRICT_READS) { - RenderSecurityManager.sEnabled = true; - } } finally { try { |