1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
|
/*
* Copyright (C) 2009 The Android Open Source Project
*
* Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License.
* You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS,
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
* See the License for the specific language governing permissions and
* limitations under the License.
*/
package com.android.providers.downloads.public_api_access_tests;
import android.content.ContentResolver;
import android.content.ContentValues;
import android.provider.Downloads;
import android.test.AndroidTestCase;
import android.test.suitebuilder.annotation.MediumTest;
/**
* DownloadProvider allows apps without permission ACCESS_DOWNLOAD_MANAGER to access it -- this is
* how the public API works. But such access is subject to strict constraints on what can be
* inserted. This test suite checks those constraints.
*/
@MediumTest
public class PublicApiAccessTest extends AndroidTestCase {
private static final String[] DISALLOWED_COLUMNS = new String[] {
Downloads.Impl.COLUMN_COOKIE_DATA,
Downloads.Impl.COLUMN_REFERER,
Downloads.Impl.COLUMN_USER_AGENT,
Downloads.Impl.COLUMN_NO_INTEGRITY,
Downloads.Impl.COLUMN_NOTIFICATION_CLASS,
Downloads.Impl.COLUMN_NOTIFICATION_EXTRAS,
Downloads.Impl.COLUMN_OTHER_UID,
Downloads.Impl.COLUMN_APP_DATA,
Downloads.Impl.COLUMN_CONTROL,
Downloads.Impl.COLUMN_STATUS,
};
private ContentResolver mContentResolver;
@Override
protected void setUp() throws Exception {
super.setUp();
mContentResolver = getContext().getContentResolver();
}
@Override
protected void tearDown() throws Exception {
if (mContentResolver != null) {
mContentResolver.delete(Downloads.CONTENT_URI, null, null);
}
super.tearDown();
}
public void testMinimalValidWrite() {
mContentResolver.insert(Downloads.Impl.CONTENT_URI, buildValidValues());
}
public void testMaximalValidWrite() {
ContentValues values = buildValidValues();
values.put(Downloads.Impl.COLUMN_TITLE, "foo");
values.put(Downloads.Impl.COLUMN_DESCRIPTION, "foo");
values.put(Downloads.Impl.COLUMN_MIME_TYPE, "foo");
values.put(Downloads.Impl.COLUMN_NOTIFICATION_PACKAGE, "foo");
values.put(Downloads.Impl.COLUMN_ALLOWED_NETWORK_TYPES, 0);
values.put(Downloads.Impl.COLUMN_ALLOW_ROAMING, true);
mContentResolver.insert(Downloads.Impl.CONTENT_URI, values);
}
private ContentValues buildValidValues() {
ContentValues values = new ContentValues();
values.put(Downloads.Impl.COLUMN_URI, "foo");
values.put(Downloads.Impl.COLUMN_DESTINATION,
Downloads.Impl.DESTINATION_CACHE_PARTITION_PURGEABLE);
values.put(Downloads.Impl.COLUMN_IS_PUBLIC_API, true);
return values;
}
public void testNoPublicApi() {
ContentValues values = buildValidValues();
values.remove(Downloads.Impl.COLUMN_IS_PUBLIC_API);
testInvalidValues(values);
}
public void testInvalidDestination() {
ContentValues values = buildValidValues();
values.put(Downloads.Impl.COLUMN_DESTINATION, Downloads.Impl.DESTINATION_EXTERNAL);
testInvalidValues(values);
values.put(Downloads.Impl.COLUMN_DESTINATION, Downloads.Impl.DESTINATION_CACHE_PARTITION);
testInvalidValues(values);
}
public void testInvalidVisibility() {
ContentValues values = buildValidValues();
values.put(Downloads.Impl.COLUMN_VISIBILITY,
Downloads.Impl.VISIBILITY_VISIBLE_NOTIFY_COMPLETED);
testInvalidValues(values);
}
public void testDisallowedColumns() {
for (String column : DISALLOWED_COLUMNS) {
ContentValues values = buildValidValues();
values.put(column, 1);
testInvalidValues(values);
}
}
public void testFileUriWithoutExternalPermission() {
ContentValues values = buildValidValues();
values.put(Downloads.Impl.COLUMN_DESTINATION, Downloads.Impl.DESTINATION_FILE_URI);
values.put(Downloads.Impl.COLUMN_FILE_NAME_HINT, "file:///sdcard/foo");
testInvalidValues(values);
}
private void testInvalidValues(ContentValues values) {
try {
mContentResolver.insert(Downloads.Impl.CONTENT_URI, values);
fail("Didn't get SecurityException as expected");
} catch (SecurityException exc) {
// expected
}
}
}
|
