| ab2a24c126f35ae4aefb469f91094e5972abd8f0 |
|
11-Jul-2013 |
Chiao Cheng <chiaocheng@google.com> |
Do not allow updates to the _data column.
Fixes a security hole where applications can update the data location of
voicemail files to point to arbitrary file paths.
Voicemail provider stores the location of the data file in the _data column.
Applications can update this with an arbitrary file path as long as they
have the ADD_VOICEMAIL permission. Then they can subsequently read that
voicemail and obtain access to the file. This location is generated by the
provider and does not need to be updated by the applications.
Bug: 9674953
Change-Id: I9c8fc45071a06d627574a52bafbd9e6e172b4bf8
/packages/providers/ContactsProvider/src/com/android/providers/contacts/util/DbQueryUtils.java
|
| dacd5de146b413de86d38b6f56a3fe0b2af4b155 |
|
17-Nov-2012 |
Chiao Cheng <chiaocheng@google.com> |
Change default sort order for email queries.
- Prioritizing "default" emails over last used emails.
- Added ordering for same domain emails as last order by.
Bug: 7183241
Bug: 7346215
Change-Id: I6a8ba3cfe08792693eec4896f16853a88713bc3f
/packages/providers/ContactsProvider/src/com/android/providers/contacts/util/DbQueryUtils.java
|
| 9978b26dd17bb2b20b91101f1e4682604336b5f6 |
|
15-Nov-2011 |
Flavio Lerda <flerda@google.com> |
Use integer constant when adding filtering clause.
Currently we are quoting an integer constant when generating the
filtering clause that excludes voicemails from the set of calls returned
to applications querying the default call log URI.
Pass the integer to the helper function, so that we can avoid quoting.
Change-Id: I1e460d2c8d3b04047cf4a1f4e1209b3e4ba5053b
/packages/providers/ContactsProvider/src/com/android/providers/contacts/util/DbQueryUtils.java
|
| aafbe295d67686870c64c74a59e589d1dfb506fa |
|
20-Jun-2011 |
Debashish Chatterjee <debashishc@google.com> |
Introduced query param 'include_voicemails' for call_log uri.
- by default only call entries (i.e. no voicemails) are returned.
- if include_voicemails is set to true then also include voicemail
records, but only if the caller has full voicemail permission.
- voicemail record can only be inserted through call_log provider if
include_voicemails is set.
Change-Id: I98f6778ace64fa752dc0525c5ce4e5eb83b2e689
/packages/providers/ContactsProvider/src/com/android/providers/contacts/util/DbQueryUtils.java
|
| 00e7c94b70f4b477653534dbe559d1759d796157 |
|
16-Jun-2011 |
Debashish Chatterjee <debashishc@google.com> |
Added checks in voicemail provider to not expose call_log fields.
- Voicemail provider now has check to ensure that no field outside of its
projection is accesible.
- Moved functionality to check ContentValues against a projection map to
DbQueryUtils.
- Associated test cases.
Change-Id: I23033c96f74f0ab981152f70e585c69ba5284602
/packages/providers/ContactsProvider/src/com/android/providers/contacts/util/DbQueryUtils.java
|
| 52e8d24f8492116f0b49b147576ce13a5f913aa2 |
|
13-Jun-2011 |
Debashish Chatterjee <debashishc@google.com> |
Voicemail provider implementation within ContactsProvider.
- New voicemail provider class
- all voicemail operations restricted to only 'voicemail' call type.
- new voicemail permissions (currently defined in the manifest file
itself)
Change-Id: I32b916c5b4a53e93bafbecf7df7bee3f5e27fee6
/packages/providers/ContactsProvider/src/com/android/providers/contacts/util/DbQueryUtils.java
|