diff options
author | Ekin Oguz <ekinoguz@google.com> | 2018-01-29 13:11:35 -0800 |
---|---|---|
committer | Tim Schumacher <timschumi@gmx.de> | 2018-04-06 22:29:59 +0200 |
commit | 47bae7d068a52bcbbb9755e4ee349cfe106a9f24 (patch) | |
tree | 23098740cd120e333df253d5edf4e4cddc1c75ca | |
parent | d42e1867e226042b5cad092e7f15db3fbfc19743 (diff) | |
download | android_packages_apps_Email-47bae7d068a52bcbbb9755e4ee349cfe106a9f24.tar.gz android_packages_apps_Email-47bae7d068a52bcbbb9755e4ee349cfe106a9f24.tar.bz2 android_packages_apps_Email-47bae7d068a52bcbbb9755e4ee349cfe106a9f24.zip |
Disallow attaching files from our own EmailAttachmentProvider.
This is to backport a security fix reported in b/71814449 and
b/72569023. Fix is using the same approach as b/27308057, which is to
prevent Compose from accepting URIs with our own email attachment
provider.
Bug: b/71814449
Change-Id: Ib9df21648d00d2ef2da9fac05cc39fee253de8e2
(cherry picked from commit 7227751994624bdb2ba958714cc861b8bab41634)
-rw-r--r-- | src/com/android/email/activity/ComposeActivityEmail.java | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/src/com/android/email/activity/ComposeActivityEmail.java b/src/com/android/email/activity/ComposeActivityEmail.java index cdfea0b4c..57835315b 100644 --- a/src/com/android/email/activity/ComposeActivityEmail.java +++ b/src/com/android/email/activity/ComposeActivityEmail.java @@ -74,4 +74,9 @@ public class ComposeActivityEmail extends ComposeActivity protected String getEmailProviderAuthority() { return EmailContent.AUTHORITY; } + + @Override + protected String getEmailAttachmentProviderAuthority() { + return EmailContent.Attachment.ATTACHMENT_PROVIDER_AUTHORITY; + } } |