Repository: cordova-amazon-fireos Updated Branches: refs/heads/master 95d806703 -> 4142cbb57
CB-7940 Disable exec bridge if bridgeSecret is wrong Project: http://git-wip-us.apache.org/repos/asf/cordova-amazon-fireos/repo Commit: http://git-wip-us.apache.org/repos/asf/cordova-amazon-fireos/commit/db508a2c Tree: http://git-wip-us.apache.org/repos/asf/cordova-amazon-fireos/tree/db508a2c Diff: http://git-wip-us.apache.org/repos/asf/cordova-amazon-fireos/diff/db508a2c Branch: refs/heads/master Commit: db508a2ce804747b783b5ae200525bf2ffd7fe02 Parents: 95d8067 Author: Andrew Grieve <[email protected]> Authored: Tue Nov 4 15:57:51 2014 -0500 Committer: Ajitha <[email protected]> Committed: Mon Nov 17 00:33:41 2014 +0530 ---------------------------------------------------------------------- framework/src/org/apache/cordova/CordovaBridge.java | 2 ++ 1 file changed, 2 insertions(+) ---------------------------------------------------------------------- http://git-wip-us.apache.org/repos/asf/cordova-amazon-fireos/blob/db508a2c/framework/src/org/apache/cordova/CordovaBridge.java ---------------------------------------------------------------------- diff --git a/framework/src/org/apache/cordova/CordovaBridge.java b/framework/src/org/apache/cordova/CordovaBridge.java index f3e48b6..becbd52 100644 --- a/framework/src/org/apache/cordova/CordovaBridge.java +++ b/framework/src/org/apache/cordova/CordovaBridge.java @@ -99,6 +99,8 @@ public class CordovaBridge { } // Bridge secret wrong and bridge not due to it being from the previous page. if (expectedBridgeSecret < 0 || bridgeSecret != expectedBridgeSecret) { + Log.e(LOG_TAG, "Bridge access attempt with wrong secret token, possibly from malicious code. Disabling exec() bridge!"); + clearBridgeSecret(); throw new IllegalAccessException(); } return true; --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
