diff options
| author | Selim Gurun <sgurun@google.com> | 2014-01-16 07:21:58 -0800 |
|---|---|---|
| committer | Android Git Automerger <android-git-automerger@android.com> | 2014-01-16 07:21:58 -0800 |
| commit | 1e395bf5184e309c857c90ce2a439b5f3d87d2fc (patch) | |
| tree | 87ceb44a3506b7a02b05a9afd05880babf2b4f7e /src/com/android/browser/Tab.java | |
| parent | 93eb5323dd110cacfff4392f0d313774ce5677a4 (diff) | |
| parent | e3e09d431c7ccfd6cda66bdd7df4845e13787c35 (diff) | |
| download | packages_apps_Browser-1e395bf5184e309c857c90ce2a439b5f3d87d2fc.zip packages_apps_Browser-1e395bf5184e309c857c90ce2a439b5f3d87d2fc.tar.gz packages_apps_Browser-1e395bf5184e309c857c90ce2a439b5f3d87d2fc.tar.bz2 | |
am e3e09d43: am dea3d2ad: am 81cb07dc: am f8c18437: am 699496ca: am 6243e7cb: Restrict loading private browser files
* commit 'e3e09d431c7ccfd6cda66bdd7df4845e13787c35':
Restrict loading private browser files
Diffstat (limited to 'src/com/android/browser/Tab.java')
| -rw-r--r-- | src/com/android/browser/Tab.java | 21 |
1 files changed, 21 insertions, 0 deletions
diff --git a/src/com/android/browser/Tab.java b/src/com/android/browser/Tab.java index e3a0333..79e635e 100644 --- a/src/com/android/browser/Tab.java +++ b/src/com/android/browser/Tab.java @@ -72,6 +72,7 @@ import com.android.browser.TabControl.OnThumbnailUpdatedListener; import com.android.browser.homepages.HomeProvider; import com.android.browser.provider.SnapshotProvider.Snapshots; +import java.io.ByteArrayInputStream; import java.io.ByteArrayOutputStream; import java.io.File; import java.io.IOException; @@ -101,6 +102,8 @@ class Tab implements PictureListener { private static final int CAPTURE_DELAY = 100; private static final int INITIAL_PROGRESS = 5; + private static final String RESTRICTED = "<html><body>not allowed</body></html>"; + private static Bitmap sDefaultFavicon; private static Paint sAlphaPaint = new Paint(); @@ -626,6 +629,24 @@ class Tab implements PictureListener { @Override public WebResourceResponse shouldInterceptRequest(WebView view, String url) { + Uri uri = Uri.parse(url); + if (uri.getScheme().toLowerCase().equals("file")) { + File file = new File(uri.getPath()); + try { + if (file.getCanonicalPath().startsWith( + mContext.getDatabasePath("foo").getParent())) { + return new WebResourceResponse("text/html","UTF-8", + new ByteArrayInputStream(RESTRICTED.getBytes("UTF-8"))); + } + } catch (Exception ex) { + Log.e(LOGTAG, "Bad canonical path" + ex.toString()); + try { + return new WebResourceResponse("text/html","UTF-8", + new ByteArrayInputStream(RESTRICTED.getBytes("UTF-8"))); + } catch (java.io.UnsupportedEncodingException e) { + } + } + } WebResourceResponse res = HomeProvider.shouldInterceptRequest( mContext, url); return res; |