Robosats/robosats
1
0
Fork 0
mirror of https://github.com/RoboSats/robosats.git synced 2025-08-14 07:37:15 +00:00
Code Issues Packages Projects Releases Wiki Activity

Merge branch 'main' into update-android-architecture-versioning-strategy

Browse Source
This commit is contained in:
KoalaSat
2025-08-09 14:42:47 +00:00
committed by GitHub
parent 2a96dec939 f60afeba55
commit 5227a0c844
1 changed files with 10 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
android/app/src/main/java/com/robosats/WebAppInterface.kt
View File

@ -41,10 +41,7 @@ class WebAppInterface(private val context: MainActivity, private val webView: We
// Security patterns for input validation
private val UUID_PATTERN = Pattern.compile("^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$", Pattern.CASE_INSENSITIVE)
private val SAFE_STRING_PATTERN = Pattern.compile("^[a-zA-Z0-9\\s_\\-.,:;!?()\\[\\]{}]*$")
// Maximum length for input strings
private val MAX_INPUT_LENGTH = 1000
private val SAFE_STRING_PATTERN = Pattern.compile("^[a-zA-Z0-9\\s_\\-.,:;!?()\\[\\]{}\"]*$")
init {
// Check if libraries are loaded and show a toast notification if there's an issue
@ -108,6 +105,13 @@ class WebAppInterface(private val context: MainActivity, private val webView: We
@JavascriptInterface
fun copyToClipboard(message: String) {
// Validate input
if (!isValidInput(message)) {
Log.e(TAG, "Invalid input for copyToClipboard")
Toast.makeText(context, "Invalid content for clipboard", Toast.LENGTH_SHORT).show()
return
}
try {
// Copy to clipboard
val clipboard = context.getSystemService(Context.CLIPBOARD_SERVICE) as android.content.ClipboardManager
@ -441,8 +445,8 @@ class WebAppInterface(private val context: MainActivity, private val webView: We
safeEvaluateJavascript("javascript:window.AndroidRobosats.onRejectPromise('$uuid', '$encodedError')")
}
private fun isValidInput(input: String?, maxLength: Int = MAX_INPUT_LENGTH): Boolean {
if (input == null || input.isEmpty() || input.length > maxLength) {
private fun isValidInput(input: String?): Boolean {
if (input == null || input.isEmpty()) {
return false
}
return SAFE_STRING_PATTERN.matcher(input).matches()