Tavis Bohne
41f3b673f1
Messenger refuses all file:///data/ uris
...
We've been informed it's possible for an app to create a world
readable hardlink in L in its own /data directory that links to
another apps private data, including Messenger data. The hardlink
bypassed our existing checks. So now we simply refuse all file: uris
in the /data/ directory.
Other apps shouldn't be sending file uris anyway, and we dont know
of any that send file:///data/ uris.
Bug: 28793303
Change-Id: I778bb2bcb9e11185357093c59fc1fa3f6caa26a1
2016-05-17 17:36:51 -07:00
..
2015-08-12 12:47:26 -07:00
2015-08-12 12:47:26 -07:00
2015-08-12 12:47:26 -07:00
2015-08-12 12:47:26 -07:00
2015-08-12 12:47:26 -07:00
2015-08-12 12:47:26 -07:00
2015-08-12 12:47:26 -07:00
2015-08-12 12:47:26 -07:00
2015-08-12 12:47:26 -07:00
2015-08-12 12:47:26 -07:00
2015-08-12 12:47:26 -07:00
2015-08-12 12:47:26 -07:00
2015-08-12 12:47:26 -07:00
2015-08-12 12:47:26 -07:00
2015-08-12 12:47:26 -07:00
2015-08-12 12:47:26 -07:00
2015-08-12 12:47:26 -07:00
2015-08-12 12:47:26 -07:00
2016-05-16 16:34:58 +01:00
2015-08-12 12:47:26 -07:00
2015-08-12 12:47:26 -07:00
2015-08-12 12:47:26 -07:00
2015-08-12 12:47:26 -07:00
2015-08-12 12:47:26 -07:00
2015-08-12 12:47:26 -07:00
2015-08-12 12:47:26 -07:00
2016-05-17 17:36:51 -07:00
2015-08-12 12:47:26 -07:00
2015-08-12 12:47:26 -07:00
2015-08-12 12:47:26 -07:00
2015-08-12 12:47:26 -07:00
2015-08-12 12:47:26 -07:00
2015-08-12 12:47:26 -07:00
2015-08-12 12:47:26 -07:00
2015-08-12 12:47:26 -07:00
2015-08-12 12:47:26 -07:00
2015-08-21 10:17:46 -07:00
2015-08-12 12:47:26 -07:00
2015-08-12 12:47:26 -07:00
2016-05-11 18:07:38 +01:00
2015-08-12 12:47:26 -07:00
2015-08-12 12:47:26 -07:00
2015-08-12 12:47:26 -07:00
2015-08-12 12:47:26 -07:00
2015-08-12 12:47:26 -07:00
2015-08-12 12:47:26 -07:00
2015-08-12 12:47:26 -07:00
2015-08-12 12:47:26 -07:00
2015-08-12 12:47:26 -07:00
2015-08-12 12:47:26 -07:00
2015-08-12 12:47:26 -07:00
2015-08-12 15:11:43 -07:00
2015-08-12 12:47:26 -07:00
2015-08-12 12:47:26 -07:00
2015-08-12 12:47:26 -07:00