diff options
| author | Chen Xu <fionaxu@google.com> | 2020-04-28 16:18:44 +0000 |
|---|---|---|
| committer | Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com> | 2020-04-28 16:18:44 +0000 |
| commit | e422c51bd31fff4de060bcf16a6452d9e88c904d (patch) | |
| tree | 4cb4f30f9e003362364b2a60e5bf1e983ef14209 /packages/CarrierDefaultApp | |
| parent | 05d1d93f2cb04fd09e2350dbbd4702a72d643be7 (diff) | |
| parent | 57c1da45bff1fd5462309cfc85e732f3993fcbaf (diff) | |
Merge "Fix WebView vulnerability by disallowing file access" am: 57c1da45bf
Change-Id: Id48f93c7d9083972b3a6a2b0ff073072a5987b23
Diffstat (limited to 'packages/CarrierDefaultApp')
| -rw-r--r-- | packages/CarrierDefaultApp/src/com/android/carrierdefaultapp/CaptivePortalLoginActivity.java | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/packages/CarrierDefaultApp/src/com/android/carrierdefaultapp/CaptivePortalLoginActivity.java b/packages/CarrierDefaultApp/src/com/android/carrierdefaultapp/CaptivePortalLoginActivity.java index 50542818e0d7..6fab9e4641b6 100644 --- a/packages/CarrierDefaultApp/src/com/android/carrierdefaultapp/CaptivePortalLoginActivity.java +++ b/packages/CarrierDefaultApp/src/com/android/carrierdefaultapp/CaptivePortalLoginActivity.java @@ -106,6 +106,7 @@ public class CaptivePortalLoginActivity extends Activity { webSettings.setSupportZoom(true); webSettings.setBuiltInZoomControls(true); webSettings.setDomStorageEnabled(true); + webSettings.setAllowFileAccess(false); mWebViewClient = new MyWebViewClient(); mWebView.setWebViewClient(mWebViewClient); mWebView.setWebChromeClient(new MyWebChromeClient()); |