Skip to content

Commit 2176af7

Browse files
committed
Build88
- Fixed Missing Authorization vulnerability
1 parent e74062e commit 2176af7

File tree

1 file changed

+15
-3
lines changed

1 file changed

+15
-3
lines changed
Original file line numberDiff line numberDiff line change
@@ -1,9 +1,11 @@
11
package app.simple.inure.activities.association
22

33
import android.os.Bundle
4+
import android.util.Log
45
import app.simple.inure.R
56
import app.simple.inure.extensions.activities.BaseActivity
67
import app.simple.inure.ui.association.Text
8+
import app.simple.inure.util.ConditionUtils.invert
79
import app.simple.inure.util.NullSafety.isNull
810

911
class TextViewerActivity : BaseActivity() {
@@ -12,10 +14,20 @@ class TextViewerActivity : BaseActivity() {
1214
super.onCreate(savedInstanceState)
1315
setContentView(R.layout.activity_main)
1416

17+
Log.d("TextViewerActivity", "onCreate: ${intent.data?.path}")
18+
1519
if (savedInstanceState.isNull()) {
16-
supportFragmentManager.beginTransaction()
17-
.replace(R.id.app_container, Text.newInstance())
18-
.commit()
20+
if (hasAppPath().invert()) {
21+
supportFragmentManager.beginTransaction()
22+
.replace(R.id.app_container, Text.newInstance())
23+
.commit()
24+
} else {
25+
showWarning("ERR: illegal action detected.")
26+
}
1927
}
2028
}
29+
30+
private fun hasAppPath(): Boolean {
31+
return intent.data?.path?.contains("data/data/$packageName")!!
32+
}
2133
}

0 commit comments

Comments
 (0)