Use a random path to prevent other apps from accessing content

onionshare / onionshare-android

Android version of OnionShare

https://onionshare.org/

GNU General Public License v3.0

141 stars 16 forks source link

Use a random path to prevent other apps from accessing content #103

Closed akwizgran closed 8 months ago

akwizgran commented 8 months ago

The path is the Base64 encoding of 128 bits from SecureRandom. This prevents anyone who doesn't know the path (eg untrusted apps running on localhost) from accessing the content. The root URL now returns a 404 page.

Fixes #104.

akwizgran commented 8 months ago

Screenshot_20230908_132433

grote commented 8 months ago

Nice work!