toki/mattermost-mobile
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

[V2] MM-33495 Sanitize filename in Android ShareExtension (#5211)

Browse source 
* [V2] MM-33495 Sanitize filename in Android ShareExtension

* Apply sanitization after getting uri last path segment
This commit is contained in:
Elias Nahum 2021-03-09 11:53:53 -03:00 committed by GitHub
parent d6a3504c08
commit 62e1003f10
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 17 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

20
android/app/src/main/java/com/mattermost/helpers/RealPathUtil.java
View file

@ -97,20 +97,24 @@ public class RealPathUtil {
File tmpFile;
String fileName = null;
if (uri == null || uri.isRelative()) {
return null;
}
// Try and get the filename from the Uri
try {
Cursor returnCursor =
context.getContentResolver().query(uri, null, null, null, null);
int nameIndex = returnCursor.getColumnIndex(OpenableColumns.DISPLAY_NAME);
returnCursor.moveToFirst();
fileName = returnCursor.getString(nameIndex);
fileName = sanitizeFilename(returnCursor.getString(nameIndex));
} catch (Exception e) {
// just continue to get the filename with the last segment of the path
}
try {
if (fileName == null) {
fileName = uri.getLastPathSegment().toString().trim();
if (TextUtils.isEmpty(fileName)) {
fileName = sanitizeFilename(uri.getLastPathSegment().toString().trim());
}
@ -231,4 +235,14 @@ public class RealPathUtil {
fileOrDirectory.delete();
}
private static String sanitizeFilename(String filename) {
if (filename == null) {
return null;
}
File f = new File(filename);
return f.getName();
}
}