com.twofortyfouram.spackle.bundle

Class BundleScrubber

java.lang.Object

com.twofortyfouram.spackle.bundle.BundleScrubber

@ThreadSafe
public final class BundleScrubber
extends Object

Scrubs Intents and Bundles of invalid extras, preventing Intent fuzzing and denial-of-service attacks from malicious applications. To use this class, call scrub(android.content.Intent) BEFORE inspecting any of the Intent's extras.

Method Summary

Modifier and Type	Method and Description
static boolean	scrub(Bundle bundle) Scrubs a Bundle for bad extras.
static boolean	scrub(Intent intent) Scrubs an Intent for bad extras in Intent.getExtras().

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Method Detail

scrub

public static boolean scrub(Intent intent)

Scrubs an Intent for bad extras in Intent.getExtras().

Note: this method does not recursively scrub Bundles.

Parameters:

intent - Intent whose extras will be scrubbed. If intent has at least one bad extra, the extra Bundle will be cleared. Note that intent may be mutated by this method.

Returns:

true if intent's extras were cleared, false if intent was not mutated.

scrub

public static boolean scrub(Bundle bundle)

Scrubs a Bundle for bad extras.

Note: this method does not recursively scrub Bundles.

Parameters:

bundle - Bundle whose extras will be scrubbed. If bundle has at least one bad extra, the Bundle will be cleared. Note that bundle may be mutated by this method.

Returns:

true if bundle was cleared, false if bundle was not mutated.