From 3b8ec792ee8674379df759e731306ea86c65a479 Mon Sep 17 00:00:00 2001 From: Moxie Marlinspike Date: Wed, 23 Mar 2016 16:45:29 -0700 Subject: [PATCH] Prohibit sharing file:// Uris Just in case someone tries something sneaky... // FREEBIE --- src/org/thoughtcrime/securesms/ShareActivity.java | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/src/org/thoughtcrime/securesms/ShareActivity.java b/src/org/thoughtcrime/securesms/ShareActivity.java index 0195942085..5dcdab0a70 100644 --- a/src/org/thoughtcrime/securesms/ShareActivity.java +++ b/src/org/thoughtcrime/securesms/ShareActivity.java @@ -193,11 +193,12 @@ public class ShareActivity extends PassphraseRequiredActionBarActivity @Override protected Uri doInBackground(Uri... uris) { try { - if (uris.length != 1 || uris[0] == null) { + if (uris.length != 1 || uris[0] == null || uris[0].getScheme().equals("file")) { return null; } InputStream input = context.getContentResolver().openInputStream(uris[0]); + if (input == null) { return null; }