DO NOT MERGE Remove file access from browser.

Bug:6212665

Change-Id: Iad1dbc452592d6b48860ec45aa0c7742c9b3a3f1
diff --git a/src/com/android/browser/BrowserSettings.java b/src/com/android/browser/BrowserSettings.java
index bb5c4bb..6e42431 100644
--- a/src/com/android/browser/BrowserSettings.java
+++ b/src/com/android/browser/BrowserSettings.java
@@ -243,6 +243,8 @@
             s.setSupportMultipleWindows(true);
             // disable content url access
             s.setAllowContentAccess(false);
+            // disable file url access
+            s.setAllowFileAccess(false);
 
             // HTML5 API flags
             s.setAppCacheEnabled(b.appCacheEnabled);