diff options
author | Jeff Sharkey <jsharkey@android.com> | 2018-07-25 14:52:14 -0600 |
---|---|---|
committer | Jeff Sharkey <jsharkey@android.com> | 2018-08-03 13:43:44 -0600 |
commit | 506994268bc4fa07d8798b7737a2952f74b8fd04 (patch) | |
tree | c33d6f062f8f0ee2cb2092221193981658f5c38e /tools/aapt2/java/JavaClassGenerator.cpp | |
parent | 57b04a86802ff879af78e782a8582462323e34e7 (diff) |
DO NOT MERGE. Extend SQLiteQueryBuilder for update and delete.
Developers often accept selection clauses from untrusted code, and
SQLiteQueryBuilder already supports a "strict" mode to help catch
SQL injection attacks. This change extends the builder to support
update() and delete() calls, so that we can help secure those
selection clauses too.
Bug: 111085900
Test: atest packages/providers/DownloadProvider/tests/
Test: atest cts/tests/app/src/android/app/cts/DownloadManagerTest.java
Test: atest cts/tests/tests/database/src/android/database/sqlite/cts/SQLiteQueryBuilderTest.java
Change-Id: Ib4fc8400f184755ee7e971ab5f2095186341730c
Merged-In: Ib4fc8400f184755ee7e971ab5f2095186341730c
Diffstat (limited to 'tools/aapt2/java/JavaClassGenerator.cpp')
0 files changed, 0 insertions, 0 deletions