From 00c679463b20c4502393ecbe73b03b205fbc80c8 Mon Sep 17 00:00:00 2001
From: Selim Gurun <sgurun@google.com>
Date: Fri, 10 Jan 2014 16:24:00 -0800
Subject: DO NOT MERGE Do not let intents request viewing private browser files

Bug: 9793586
Change-Id: I8f6f03b05556ee4d6846c15752de9be54c003060
(cherry picked from commit 348cca6c61e1ad3f2d580298d9ec5f1826f64269)
---
 src/com/android/browser/IntentHandler.java | 7 +++++++
 1 file changed, 7 insertions(+)

(limited to 'src')

diff --git a/src/com/android/browser/IntentHandler.java b/src/com/android/browser/IntentHandler.java
index 45520d6..5b79fb1 100644
--- a/src/com/android/browser/IntentHandler.java
+++ b/src/com/android/browser/IntentHandler.java
@@ -107,6 +107,13 @@ public class IntentHandler {
                 urlData = new UrlData(mSettings.getHomePage());
             }
 
+            // If url is to view private data files, don't allow.
+            Uri uri = intent.getData();
+            if (uri != null && uri.getScheme().startsWith("file") &&
+                uri.getPath().startsWith(mActivity.getDatabasePath("foo").getParent())) {
+                return;
+            }
+
             if (intent.getBooleanExtra(Browser.EXTRA_CREATE_NEW_TAB, false)
                   || urlData.isPreloaded()) {
                 Tab t = mController.openTab(urlData);
-- 
cgit v1.1