41f3b673f1f4b4071ef1af180a6397e1318885d3
We've been informed it's possible for an app to create a world readable hardlink in L in its own /data directory that links to another apps private data, including Messenger data. The hardlink bypassed our existing checks. So now we simply refuse all file: uris in the /data/ directory. Other apps shouldn't be sending file uris anyway, and we dont know of any that send file:///data/ uris. Bug: 28793303 Change-Id: I778bb2bcb9e11185357093c59fc1fa3f6caa26a1
Description
LineageOS Messaging app - base for default SMS handler
Languages
Java
97.6%
HTML
1.1%
C++
0.8%
Shell
0.4%
Makefile
0.1%