mirror of
https://github.com/gedoor/legado.git
synced 2025-08-10 00:52:30 +00:00
68 lines
2.7 KiB
Kotlin
68 lines
2.7 KiB
Kotlin
/*
|
|
* Copyright (c) 2005, Oracle and/or its affiliates. All rights reserved.
|
|
* DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
|
|
*
|
|
* This code is free software; you can redistribute it and/or modify it
|
|
* under the terms of the GNU General Public License version 2 only, as
|
|
* published by the Free Software Foundation. Oracle designates this
|
|
* particular file as subject to the "Classpath" exception as provided
|
|
* by Oracle in the LICENSE file that accompanied this code.
|
|
*
|
|
* This code is distributed in the hope that it will be useful, but WITHOUT
|
|
* ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
|
|
* FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
|
|
* version 2 for more details (a copy is included in the LICENSE file that
|
|
* accompanied this code).
|
|
*
|
|
* You should have received a copy of the GNU General Public License version
|
|
* 2 along with this work; if not, write to the Free Software Foundation,
|
|
* Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
|
|
*
|
|
* Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA
|
|
* or visit www.oracle.com if you need additional information or have any
|
|
* questions.
|
|
*/
|
|
package com.script.rhino
|
|
|
|
import org.mozilla.javascript.ClassShutter
|
|
|
|
/**
|
|
* This class prevents script access to certain sensitive classes.
|
|
* Note that this class checks over and above SecurityManager. i.e., although
|
|
* a SecurityManager would pass, class shutter may still prevent access.
|
|
*
|
|
* @author A. Sundararajan
|
|
* @since 1.6
|
|
*/
|
|
object RhinoClassShutter : ClassShutter {
|
|
|
|
private val protectedClasses by lazy {
|
|
val protectedClasses = HashMap<Any, Any>()
|
|
protectedClasses["java.lang.Runtime"] = true
|
|
protectedClasses["java.io.File"] = true
|
|
protectedClasses["java.security.AccessController"] = true
|
|
protectedClasses["java.nio.file.Paths"] = true
|
|
protectedClasses["java.nio.file.Files"] = true
|
|
protectedClasses["io.legado.app.data.AppDatabaseKt"] = true
|
|
protectedClasses["android.content.Intent"] = true
|
|
protectedClasses["androidx.core.content.FileProvider"] = true
|
|
protectedClasses["android.provider.Settings"] = true
|
|
protectedClasses
|
|
}
|
|
|
|
override fun visibleToScripts(fullClassName: String): Boolean {
|
|
val sm = System.getSecurityManager()
|
|
if (sm != null) {
|
|
val i = fullClassName.lastIndexOf(".")
|
|
if (i != -1) {
|
|
try {
|
|
sm.checkPackageAccess(fullClassName.substring(0, i))
|
|
} catch (var5: SecurityException) {
|
|
return false
|
|
}
|
|
}
|
|
}
|
|
return protectedClasses[fullClassName] == null
|
|
}
|
|
|
|
} |