tree 7d8c94b565871331c0186aee410caa9821ef576d
parent bce9c3c2c9f8ed6492d919148044ef33adb8ddf3
author Ekin Oguz <ekinoguz@google.com> 1480376042 -0800
committer gitbuildkicker <android-build@google.com> 1482187294 -0800

Don't allow file attachment from /data through GET_CONTENT.

A custom picker can be used to attach files to Compose activity. With
this change, we are disallowing files belonging to file:///data/... to
be attached from custom pickers, in order not to expose internal
application data.

If the Intent Uri is a "file" and the file is in
`Environment.getDataDirectory()`, then throw a
AttachmentFailureException
which is caught immediately and shows a toast to the user.

Details b/31494146#comment13
Fix b/32615212

Change-Id: I037888b01fef1cdf5053602cdf9194286d5648df
(cherry picked from commit eace8b43e8d1512a205554715ca840324bfbe35f)