From fe15d34a80b238016b60d96b0520d45e90f55b3b Mon Sep 17 00:00:00 2001 From: Ian Clelland Date: Thu, 30 Oct 2014 12:17:05 -0400 Subject: [PATCH] Use /app_webview/ rather than app_webview to filter bad requests --- framework/src/org/apache/cordova/CordovaUriHelper.java | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/framework/src/org/apache/cordova/CordovaUriHelper.java b/framework/src/org/apache/cordova/CordovaUriHelper.java index 9aea8176..64a0a002 100644 --- a/framework/src/org/apache/cordova/CordovaUriHelper.java +++ b/framework/src/org/apache/cordova/CordovaUriHelper.java @@ -49,12 +49,12 @@ public class CordovaUriHelper { Boolean pluginManagerAllowsNavigation = this.appView.getPluginManager().shouldAllowNavigation(url); if (pluginManagerAllowsNavigation == null) { // Default policy: - // Internal urls on file:// or data:// that do not contain "app_webview" are allowed for navigation + // Internal urls on file:// or data:// that do not contain "/app_webview/" are allowed for navigation if(url.startsWith("file://") || url.startsWith("data:")) { //This directory on WebKit/Blink based webviews contains SQLite databases! //DON'T CHANGE THIS UNLESS YOU KNOW WHAT YOU'RE DOING! - return !url.contains("app_webview"); + return !url.contains("/app_webview/"); } return false; } @@ -88,12 +88,12 @@ public class CordovaUriHelper { Boolean pluginManagerAllowsRequest = this.appView.getPluginManager().shouldAllowRequest(url); if (pluginManagerAllowsRequest == null) { // Default policy: - // Internal urls on file:// or data:// that do not contain "app_webview" are allowed for navigation + // Internal urls on file:// or data:// that do not contain "/app_webview/" are allowed for navigation if(url.startsWith("file://") || url.startsWith("data:")) { //This directory on WebKit/Blink based webviews contains SQLite databases! //DON'T CHANGE THIS UNLESS YOU KNOW WHAT YOU'RE DOING! - return !url.contains("app_webview"); + return !url.contains("/app_webview/"); } return false; }