aboutsummaryrefslogtreecommitdiffstats
path: root/app/src/main/java/com/zeapo/pwdstore/crypto
diff options
context:
space:
mode:
authorDiogenes Molinares <amolinares19@gmail.com>2020-06-18 16:19:31 +0200
committerGitHub <noreply@github.com>2020-06-18 19:49:31 +0530
commit0a4bcc57f5d0f319f72f751c4406ca1877401b63 (patch)
treea3110cc111ab23249e8a7262ce2a3228ba055c9c /app/src/main/java/com/zeapo/pwdstore/crypto
parent23b488a8eb69c99d5337538cc17690d2b637b9be (diff)
downloadHardenedPass-0a4bcc57f5d0f319f72f751c4406ca1877401b63.tar.gz
HardenedPass-0a4bcc57f5d0f319f72f751c4406ca1877401b63.zip
Avoid destination's file outside repository (#861)
Diffstat (limited to 'app/src/main/java/com/zeapo/pwdstore/crypto')
-rw-r--r--app/src/main/java/com/zeapo/pwdstore/crypto/PasswordCreationActivity.kt6
1 files changed, 6 insertions, 0 deletions
diff --git a/app/src/main/java/com/zeapo/pwdstore/crypto/PasswordCreationActivity.kt b/app/src/main/java/com/zeapo/pwdstore/crypto/PasswordCreationActivity.kt
index 1fdeafe9..c34d1a8a 100644
--- a/app/src/main/java/com/zeapo/pwdstore/crypto/PasswordCreationActivity.kt
+++ b/app/src/main/java/com/zeapo/pwdstore/crypto/PasswordCreationActivity.kt
@@ -18,6 +18,7 @@ import androidx.lifecycle.lifecycleScope
import com.github.ajalt.timberkt.e
import com.google.android.material.dialog.MaterialAlertDialogBuilder
import com.zeapo.pwdstore.PasswordEntry
+import com.zeapo.pwdstore.utils.isInsideRepository
import com.zeapo.pwdstore.R
import com.zeapo.pwdstore.autofill.oreo.AutofillPreferences
import com.zeapo.pwdstore.autofill.oreo.DirectoryStructure
@@ -235,6 +236,11 @@ class PasswordCreationActivity : BasePgpActivity(), OpenPgpServiceConnection.OnB
snackbar(message = getString(R.string.password_creation_duplicate_error))
return@executeApiAsync
}
+
+ if (!isInsideRepository(file)) {
+ snackbar(message = getString(R.string.message_error_destination_outside_repo))
+ return@executeApiAsync
+ }
try {
file.outputStream().use {
it.write(outputStream.toByteArray())