tree 434b4422d6848dd199586e317e801d50f4a0b4a8
parent 7132002f228d42159fc1d8dac2aa60b379d9fbde
author Régis Décamps <regisd@google.com> 1456240614 +0100
committer Dirk Vogt <dirk@fairphone.com> 1461063015 +0200

FPII-1831: Don't allow file attachment from file:///data.

Don't allow file attachment from file:///data.

Commit 24ed2941ab132e4156bd38f0ab734c81dae8fc2e allows file://
attachment on the /data directory if they are from the same process.

This was done to work around applications that shared their internal
data file. However, this is bad practice, and other apps should share
content:// Uri instead.

With this change, Email doesn't allow this anymore. This fixes
security issue 199888.

Also, add Analytics for these errors
compose_errors > send_intent_attachment > data_dir

https://code.google.com/p/android/issues/detail?id=199888
b/26989185
Change-Id: I7cae3389f4f7cf5f86600a58c6ccdffaf889d1c3
(cherry picked from commit 6db0bc5ac266ca314e3b6a7ba070d90dc6d74795)