empathicqubit/Signal-Android
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 1

Prohibit sharing file:// Uris

Browse source 
Just in case someone tries something sneaky...

// FREEBIE
This commit is contained in:
Moxie Marlinspike 2016-03-23 16:45:29 -07:00
parent 4168092f5d
commit 3b8ec792ee
1 changed files with 2 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
src/org/thoughtcrime/securesms/ShareActivity.java
View file

@ -193,11 +193,12 @@ public class ShareActivity extends PassphraseRequiredActionBarActivity
@Override
protected Uri doInBackground(Uri... uris) {
try {
if (uris.length != 1 || uris[0] == null) {
if (uris.length != 1 || uris[0] == null || uris[0].getScheme().equals("file")) {
return null;
}
InputStream input = context.getContentResolver().openInputStream(uris[0]);
if (input == null) {
return null;
}