Merge "Implement content protection processor" into udc-qpr-dev am: 9d71b5732d
Original change: https://googleplex-android-review.googlesource.com/c/platform/frameworks/base/+/23466114 Change-Id: I4294633b8bb7c9c861dc9164ca266bdabf20e1a1 Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
This commit is contained in:
Nino Jagar
@@ -0,0 +1,228 @@
|
||||
/*
|
||||
* Copyright (C) 2023 The Android Open Source Project
|
||||
*
|
||||
* Licensed under the Apache License, Version 2.0 (the "License");
|
||||
* you may not use this file except in compliance with the License.
|
||||
* You may obtain a copy of the License at
|
||||
*
|
||||
* http://www.apache.org/licenses/LICENSE-2.0
|
||||
*
|
||||
* Unless required by applicable law or agreed to in writing, software
|
||||
* distributed under the License is distributed on an "AS IS" BASIS,
|
||||
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
* See the License for the specific language governing permissions and
|
||||
* limitations under the License.
|
||||
*/
|
||||
|
||||
package android.view.contentprotection;
|
||||
|
||||
import android.annotation.NonNull;
|
||||
import android.annotation.Nullable;
|
||||
import android.annotation.UiThread;
|
||||
import android.content.pm.ParceledListSlice;
|
||||
import android.os.Handler;
|
||||
import android.text.InputType;
|
||||
import android.util.Log;
|
||||
import android.view.contentcapture.ContentCaptureEvent;
|
||||
import android.view.contentcapture.IContentCaptureManager;
|
||||
import android.view.contentcapture.ViewNode;
|
||||
|
||||
import com.android.internal.annotations.VisibleForTesting;
|
||||
import com.android.internal.util.RingBuffer;
|
||||
|
||||
import java.time.Duration;
|
||||
import java.time.Instant;
|
||||
import java.util.Arrays;
|
||||
import java.util.Collections;
|
||||
import java.util.HashSet;
|
||||
import java.util.List;
|
||||
import java.util.Set;
|
||||
|
||||
/**
|
||||
* Main entry point for processing {@link ContentCaptureEvent} for the content protection flow.
|
||||
*
|
||||
* @hide
|
||||
*/
|
||||
public class ContentProtectionEventProcessor {
|
||||
|
||||
private static final String TAG = "ContentProtectionEventProcessor";
|
||||
|
||||
private static final List<Integer> PASSWORD_FIELD_INPUT_TYPES =
|
||||
Collections.unmodifiableList(
|
||||
Arrays.asList(
|
||||
InputType.TYPE_NUMBER_VARIATION_PASSWORD,
|
||||
InputType.TYPE_TEXT_VARIATION_PASSWORD,
|
||||
InputType.TYPE_TEXT_VARIATION_VISIBLE_PASSWORD,
|
||||
InputType.TYPE_TEXT_VARIATION_WEB_PASSWORD));
|
||||
|
||||
private static final List<String> PASSWORD_TEXTS =
|
||||
Collections.unmodifiableList(
|
||||
Arrays.asList("password", "pass word", "code", "pin", "credential"));
|
||||
|
||||
private static final List<String> ADDITIONAL_SUSPICIOUS_TEXTS =
|
||||
Collections.unmodifiableList(
|
||||
Arrays.asList("user", "mail", "phone", "number", "login", "log in", "sign in"));
|
||||
|
||||
private static final Duration MIN_DURATION_BETWEEN_FLUSHING = Duration.ofSeconds(3);
|
||||
|
||||
private static final String ANDROID_CLASS_NAME_PREFIX = "android.";
|
||||
|
||||
private static final Set<Integer> EVENT_TYPES_TO_STORE =
|
||||
Collections.unmodifiableSet(
|
||||
new HashSet<>(
|
||||
Arrays.asList(
|
||||
ContentCaptureEvent.TYPE_VIEW_APPEARED,
|
||||
ContentCaptureEvent.TYPE_VIEW_DISAPPEARED,
|
||||
ContentCaptureEvent.TYPE_VIEW_TEXT_CHANGED)));
|
||||
|
||||
@NonNull private final RingBuffer<ContentCaptureEvent> mEventBuffer;
|
||||
|
||||
@NonNull private final Handler mHandler;
|
||||
|
||||
@NonNull private final IContentCaptureManager mContentCaptureManager;
|
||||
|
||||
@NonNull private final String mPackageName;
|
||||
|
||||
@VisibleForTesting(visibility = VisibleForTesting.Visibility.PRIVATE)
|
||||
public boolean mPasswordFieldDetected = false;
|
||||
|
||||
@VisibleForTesting(visibility = VisibleForTesting.Visibility.PRIVATE)
|
||||
public boolean mSuspiciousTextDetected = false;
|
||||
|
||||
@VisibleForTesting(visibility = VisibleForTesting.Visibility.PRIVATE)
|
||||
@Nullable
|
||||
public Instant mLastFlushTime;
|
||||
|
||||
public ContentProtectionEventProcessor(
|
||||
@NonNull RingBuffer<ContentCaptureEvent> eventBuffer,
|
||||
@NonNull Handler handler,
|
||||
@NonNull IContentCaptureManager contentCaptureManager,
|
||||
@NonNull String packageName) {
|
||||
mEventBuffer = eventBuffer;
|
||||
mHandler = handler;
|
||||
mContentCaptureManager = contentCaptureManager;
|
||||
mPackageName = packageName;
|
||||
}
|
||||
|
||||
/** Main entry point for {@link ContentCaptureEvent} processing. */
|
||||
@UiThread
|
||||
public void processEvent(@NonNull ContentCaptureEvent event) {
|
||||
if (EVENT_TYPES_TO_STORE.contains(event.getType())) {
|
||||
storeEvent(event);
|
||||
}
|
||||
if (event.getType() == ContentCaptureEvent.TYPE_VIEW_APPEARED) {
|
||||
processViewAppearedEvent(event);
|
||||
}
|
||||
}
|
||||
|
||||
@UiThread
|
||||
private void storeEvent(@NonNull ContentCaptureEvent event) {
|
||||
// Ensure receiver gets the package name which might not be set
|
||||
ViewNode viewNode = (event.getViewNode() != null) ? event.getViewNode() : new ViewNode();
|
||||
viewNode.setTextIdEntry(mPackageName);
|
||||
event.setViewNode(viewNode);
|
||||
mEventBuffer.append(event);
|
||||
}
|
||||
|
||||
@UiThread
|
||||
private void processViewAppearedEvent(@NonNull ContentCaptureEvent event) {
|
||||
mPasswordFieldDetected |= isPasswordField(event);
|
||||
mSuspiciousTextDetected |= isSuspiciousText(event);
|
||||
if (mPasswordFieldDetected && mSuspiciousTextDetected) {
|
||||
loginDetected();
|
||||
}
|
||||
}
|
||||
|
||||
@UiThread
|
||||
private void loginDetected() {
|
||||
if (mLastFlushTime == null
|
||||
|| Instant.now().isAfter(mLastFlushTime.plus(MIN_DURATION_BETWEEN_FLUSHING))) {
|
||||
flush();
|
||||
}
|
||||
mPasswordFieldDetected = false;
|
||||
mSuspiciousTextDetected = false;
|
||||
}
|
||||
|
||||
@UiThread
|
||||
private void flush() {
|
||||
mLastFlushTime = Instant.now();
|
||||
|
||||
// Note the thread annotations, do not move clearEvents to mHandler
|
||||
ParceledListSlice<ContentCaptureEvent> events = clearEvents();
|
||||
mHandler.post(() -> handlerOnLoginDetected(events));
|
||||
}
|
||||
|
||||
@UiThread
|
||||
@NonNull
|
||||
private ParceledListSlice<ContentCaptureEvent> clearEvents() {
|
||||
List<ContentCaptureEvent> events = Arrays.asList(mEventBuffer.toArray());
|
||||
mEventBuffer.clear();
|
||||
return new ParceledListSlice<>(events);
|
||||
}
|
||||
|
||||
private void handlerOnLoginDetected(@NonNull ParceledListSlice<ContentCaptureEvent> events) {
|
||||
try {
|
||||
// TODO(b/275732576): Call mContentCaptureManager
|
||||
} catch (Exception ex) {
|
||||
Log.e(TAG, "Failed to flush events for: " + mPackageName, ex);
|
||||
}
|
||||
}
|
||||
|
||||
private boolean isPasswordField(@NonNull ContentCaptureEvent event) {
|
||||
return isPasswordField(event.getViewNode());
|
||||
}
|
||||
|
||||
private boolean isPasswordField(@Nullable ViewNode viewNode) {
|
||||
if (viewNode == null) {
|
||||
return false;
|
||||
}
|
||||
return isAndroidPasswordField(viewNode) || isWebViewPasswordField(viewNode);
|
||||
}
|
||||
|
||||
private boolean isAndroidPasswordField(@NonNull ViewNode viewNode) {
|
||||
if (!isAndroidViewNode(viewNode)) {
|
||||
return false;
|
||||
}
|
||||
int inputType = viewNode.getInputType();
|
||||
return PASSWORD_FIELD_INPUT_TYPES.stream()
|
||||
.anyMatch(passwordInputType -> (inputType & passwordInputType) != 0);
|
||||
}
|
||||
|
||||
private boolean isWebViewPasswordField(@NonNull ViewNode viewNode) {
|
||||
if (viewNode.getClassName() != null) {
|
||||
return false;
|
||||
}
|
||||
return isPasswordText(ContentProtectionUtils.getViewNodeText(viewNode));
|
||||
}
|
||||
|
||||
private boolean isAndroidViewNode(@NonNull ViewNode viewNode) {
|
||||
String className = viewNode.getClassName();
|
||||
return className != null && className.startsWith(ANDROID_CLASS_NAME_PREFIX);
|
||||
}
|
||||
|
||||
private boolean isSuspiciousText(@NonNull ContentCaptureEvent event) {
|
||||
return isSuspiciousText(ContentProtectionUtils.getEventText(event))
|
||||
|| isSuspiciousText(ContentProtectionUtils.getViewNodeText(event));
|
||||
}
|
||||
|
||||
private boolean isSuspiciousText(@Nullable String text) {
|
||||
if (text == null) {
|
||||
return false;
|
||||
}
|
||||
if (isPasswordText(text)) {
|
||||
return true;
|
||||
}
|
||||
String lowerCaseText = text.toLowerCase();
|
||||
return ADDITIONAL_SUSPICIOUS_TEXTS.stream()
|
||||
.anyMatch(suspiciousText -> lowerCaseText.contains(suspiciousText));
|
||||
}
|
||||
|
||||
private boolean isPasswordText(@Nullable String text) {
|
||||
if (text == null) {
|
||||
return false;
|
||||
}
|
||||
String lowerCaseText = text.toLowerCase();
|
||||
return PASSWORD_TEXTS.stream()
|
||||
.anyMatch(passwordText -> lowerCaseText.contains(passwordText));
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,477 @@
|
||||
/*
|
||||
* Copyright (C) 2023 The Android Open Source Project
|
||||
*
|
||||
* Licensed under the Apache License, Version 2.0 (the "License");
|
||||
* you may not use this file except in compliance with the License.
|
||||
* You may obtain a copy of the License at
|
||||
*
|
||||
* http://www.apache.org/licenses/LICENSE-2.0
|
||||
*
|
||||
* Unless required by applicable law or agreed to in writing, software
|
||||
* distributed under the License is distributed on an "AS IS" BASIS,
|
||||
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
* See the License for the specific language governing permissions and
|
||||
* limitations under the License.
|
||||
*/
|
||||
|
||||
package android.view.contentprotection;
|
||||
|
||||
import static android.view.contentcapture.ContentCaptureEvent.TYPE_VIEW_APPEARED;
|
||||
import static android.view.contentcapture.ContentCaptureEvent.TYPE_VIEW_DISAPPEARED;
|
||||
import static android.view.contentcapture.ContentCaptureEvent.TYPE_VIEW_TEXT_CHANGED;
|
||||
|
||||
import static com.google.common.truth.Truth.assertThat;
|
||||
|
||||
import static org.mockito.Mockito.never;
|
||||
import static org.mockito.Mockito.times;
|
||||
import static org.mockito.Mockito.verify;
|
||||
import static org.mockito.Mockito.verifyNoMoreInteractions;
|
||||
import static org.mockito.Mockito.when;
|
||||
|
||||
import android.annotation.Nullable;
|
||||
import android.content.Context;
|
||||
import android.os.Handler;
|
||||
import android.os.Looper;
|
||||
import android.text.InputType;
|
||||
import android.view.View;
|
||||
import android.view.contentcapture.ContentCaptureEvent;
|
||||
import android.view.contentcapture.IContentCaptureManager;
|
||||
import android.view.contentcapture.ViewNode;
|
||||
import android.view.contentcapture.ViewNode.ViewStructureImpl;
|
||||
|
||||
import androidx.test.core.app.ApplicationProvider;
|
||||
import androidx.test.ext.junit.runners.AndroidJUnit4;
|
||||
import androidx.test.filters.SmallTest;
|
||||
|
||||
import com.android.internal.util.RingBuffer;
|
||||
|
||||
import com.google.common.collect.ImmutableSet;
|
||||
|
||||
import org.junit.Before;
|
||||
import org.junit.Rule;
|
||||
import org.junit.Test;
|
||||
import org.junit.runner.RunWith;
|
||||
import org.mockito.Mock;
|
||||
import org.mockito.junit.MockitoJUnit;
|
||||
import org.mockito.junit.MockitoRule;
|
||||
|
||||
import java.time.Instant;
|
||||
import java.util.ArrayList;
|
||||
import java.util.List;
|
||||
import java.util.Set;
|
||||
|
||||
/**
|
||||
* Test for {@link ContentProtectionEventProcessor}.
|
||||
*
|
||||
* <p>Run with: {@code atest
|
||||
* FrameworksCoreTests:android.view.contentprotection.ContentProtectionEventProcessorTest}
|
||||
*/
|
||||
@RunWith(AndroidJUnit4.class)
|
||||
@SmallTest
|
||||
public class ContentProtectionEventProcessorTest {
|
||||
|
||||
private static final String PACKAGE_NAME = "com.test.package.name";
|
||||
|
||||
private static final String ANDROID_CLASS_NAME = "android.test.some.class.name";
|
||||
|
||||
private static final String PASSWORD_TEXT = "ENTER PASSWORD HERE";
|
||||
|
||||
private static final String SUSPICIOUS_TEXT = "PLEASE SIGN IN";
|
||||
|
||||
private static final String SAFE_TEXT = "SAFE TEXT";
|
||||
|
||||
private static final ContentCaptureEvent PROCESS_EVENT = createProcessEvent();
|
||||
|
||||
private static final Set<Integer> EVENT_TYPES_TO_STORE =
|
||||
ImmutableSet.of(TYPE_VIEW_APPEARED, TYPE_VIEW_DISAPPEARED, TYPE_VIEW_TEXT_CHANGED);
|
||||
|
||||
@Rule public final MockitoRule mMockitoRule = MockitoJUnit.rule();
|
||||
|
||||
@Mock private RingBuffer<ContentCaptureEvent> mMockEventBuffer;
|
||||
|
||||
@Mock private IContentCaptureManager mMockContentCaptureManager;
|
||||
|
||||
private final Context mContext = ApplicationProvider.getApplicationContext();
|
||||
|
||||
private ContentProtectionEventProcessor mContentProtectionEventProcessor;
|
||||
|
||||
@Before
|
||||
public void setup() {
|
||||
mContentProtectionEventProcessor =
|
||||
new ContentProtectionEventProcessor(
|
||||
mMockEventBuffer,
|
||||
new Handler(Looper.getMainLooper()),
|
||||
mMockContentCaptureManager,
|
||||
PACKAGE_NAME);
|
||||
}
|
||||
|
||||
@Test
|
||||
public void processEvent_buffer_storesOnlySubsetOfEventTypes() {
|
||||
List<ContentCaptureEvent> expectedEvents = new ArrayList<>();
|
||||
for (int type = -100; type <= 100; type++) {
|
||||
ContentCaptureEvent event = createEvent(type);
|
||||
if (EVENT_TYPES_TO_STORE.contains(type)) {
|
||||
expectedEvents.add(event);
|
||||
}
|
||||
|
||||
mContentProtectionEventProcessor.processEvent(event);
|
||||
}
|
||||
|
||||
assertThat(expectedEvents).hasSize(EVENT_TYPES_TO_STORE.size());
|
||||
expectedEvents.forEach((expectedEvent) -> verify(mMockEventBuffer).append(expectedEvent));
|
||||
verifyNoMoreInteractions(mMockEventBuffer);
|
||||
}
|
||||
|
||||
@Test
|
||||
public void processEvent_buffer_setsTextIdEntry_withoutExistingViewNode() {
|
||||
ContentCaptureEvent event = createStoreEvent();
|
||||
|
||||
mContentProtectionEventProcessor.processEvent(event);
|
||||
|
||||
assertThat(event.getViewNode()).isNotNull();
|
||||
assertThat(event.getViewNode().getTextIdEntry()).isEqualTo(PACKAGE_NAME);
|
||||
verify(mMockEventBuffer).append(event);
|
||||
}
|
||||
|
||||
@Test
|
||||
public void processEvent_buffer_setsTextIdEntry_withExistingViewNode() {
|
||||
ViewNode viewNode = new ViewNode();
|
||||
viewNode.setTextIdEntry(PACKAGE_NAME + "TO BE OVERWRITTEN");
|
||||
ContentCaptureEvent event = createStoreEvent();
|
||||
event.setViewNode(viewNode);
|
||||
|
||||
mContentProtectionEventProcessor.processEvent(event);
|
||||
|
||||
assertThat(event.getViewNode()).isSameInstanceAs(viewNode);
|
||||
assertThat(viewNode.getTextIdEntry()).isEqualTo(PACKAGE_NAME);
|
||||
verify(mMockEventBuffer).append(event);
|
||||
}
|
||||
|
||||
@Test
|
||||
public void processEvent_loginDetected_inspectsOnlyTypeViewAppeared() {
|
||||
mContentProtectionEventProcessor.mPasswordFieldDetected = true;
|
||||
mContentProtectionEventProcessor.mSuspiciousTextDetected = true;
|
||||
|
||||
for (int type = -100; type <= 100; type++) {
|
||||
if (type == TYPE_VIEW_APPEARED) {
|
||||
continue;
|
||||
}
|
||||
|
||||
mContentProtectionEventProcessor.processEvent(createEvent(type));
|
||||
|
||||
assertThat(mContentProtectionEventProcessor.mPasswordFieldDetected).isTrue();
|
||||
assertThat(mContentProtectionEventProcessor.mSuspiciousTextDetected).isTrue();
|
||||
}
|
||||
|
||||
verify(mMockEventBuffer, never()).clear();
|
||||
verify(mMockEventBuffer, never()).toArray();
|
||||
}
|
||||
|
||||
@Test
|
||||
public void processEvent_loginDetected() {
|
||||
when(mMockEventBuffer.toArray()).thenReturn(new ContentCaptureEvent[0]);
|
||||
mContentProtectionEventProcessor.mPasswordFieldDetected = true;
|
||||
mContentProtectionEventProcessor.mSuspiciousTextDetected = true;
|
||||
|
||||
mContentProtectionEventProcessor.processEvent(PROCESS_EVENT);
|
||||
|
||||
assertThat(mContentProtectionEventProcessor.mPasswordFieldDetected).isFalse();
|
||||
assertThat(mContentProtectionEventProcessor.mSuspiciousTextDetected).isFalse();
|
||||
verify(mMockEventBuffer).clear();
|
||||
verify(mMockEventBuffer).toArray();
|
||||
}
|
||||
|
||||
@Test
|
||||
public void processEvent_loginDetected_passwordFieldNotDetected() {
|
||||
mContentProtectionEventProcessor.mSuspiciousTextDetected = true;
|
||||
assertThat(mContentProtectionEventProcessor.mPasswordFieldDetected).isFalse();
|
||||
|
||||
mContentProtectionEventProcessor.processEvent(PROCESS_EVENT);
|
||||
|
||||
assertThat(mContentProtectionEventProcessor.mPasswordFieldDetected).isFalse();
|
||||
assertThat(mContentProtectionEventProcessor.mSuspiciousTextDetected).isTrue();
|
||||
verify(mMockEventBuffer, never()).clear();
|
||||
verify(mMockEventBuffer, never()).toArray();
|
||||
}
|
||||
|
||||
@Test
|
||||
public void processEvent_loginDetected_suspiciousTextNotDetected() {
|
||||
mContentProtectionEventProcessor.mPasswordFieldDetected = true;
|
||||
assertThat(mContentProtectionEventProcessor.mSuspiciousTextDetected).isFalse();
|
||||
|
||||
mContentProtectionEventProcessor.processEvent(PROCESS_EVENT);
|
||||
|
||||
assertThat(mContentProtectionEventProcessor.mPasswordFieldDetected).isTrue();
|
||||
assertThat(mContentProtectionEventProcessor.mSuspiciousTextDetected).isFalse();
|
||||
verify(mMockEventBuffer, never()).clear();
|
||||
verify(mMockEventBuffer, never()).toArray();
|
||||
}
|
||||
|
||||
@Test
|
||||
public void processEvent_loginDetected_withoutViewNode() {
|
||||
assertThat(mContentProtectionEventProcessor.mPasswordFieldDetected).isFalse();
|
||||
assertThat(mContentProtectionEventProcessor.mSuspiciousTextDetected).isFalse();
|
||||
|
||||
mContentProtectionEventProcessor.processEvent(PROCESS_EVENT);
|
||||
|
||||
assertThat(mContentProtectionEventProcessor.mPasswordFieldDetected).isFalse();
|
||||
assertThat(mContentProtectionEventProcessor.mSuspiciousTextDetected).isFalse();
|
||||
verify(mMockEventBuffer, never()).clear();
|
||||
verify(mMockEventBuffer, never()).toArray();
|
||||
}
|
||||
|
||||
@Test
|
||||
public void processEvent_multipleLoginsDetected_belowFlushThreshold() {
|
||||
when(mMockEventBuffer.toArray()).thenReturn(new ContentCaptureEvent[0]);
|
||||
|
||||
mContentProtectionEventProcessor.mPasswordFieldDetected = true;
|
||||
mContentProtectionEventProcessor.mSuspiciousTextDetected = true;
|
||||
mContentProtectionEventProcessor.processEvent(PROCESS_EVENT);
|
||||
|
||||
mContentProtectionEventProcessor.mPasswordFieldDetected = true;
|
||||
mContentProtectionEventProcessor.mSuspiciousTextDetected = true;
|
||||
mContentProtectionEventProcessor.processEvent(PROCESS_EVENT);
|
||||
|
||||
assertThat(mContentProtectionEventProcessor.mPasswordFieldDetected).isFalse();
|
||||
assertThat(mContentProtectionEventProcessor.mSuspiciousTextDetected).isFalse();
|
||||
verify(mMockEventBuffer).clear();
|
||||
verify(mMockEventBuffer).toArray();
|
||||
}
|
||||
|
||||
@Test
|
||||
public void processEvent_multipleLoginsDetected_aboveFlushThreshold() {
|
||||
when(mMockEventBuffer.toArray()).thenReturn(new ContentCaptureEvent[0]);
|
||||
|
||||
mContentProtectionEventProcessor.mPasswordFieldDetected = true;
|
||||
mContentProtectionEventProcessor.mSuspiciousTextDetected = true;
|
||||
mContentProtectionEventProcessor.processEvent(PROCESS_EVENT);
|
||||
|
||||
mContentProtectionEventProcessor.mLastFlushTime = Instant.now().minusSeconds(5);
|
||||
|
||||
mContentProtectionEventProcessor.mPasswordFieldDetected = true;
|
||||
mContentProtectionEventProcessor.mSuspiciousTextDetected = true;
|
||||
mContentProtectionEventProcessor.processEvent(PROCESS_EVENT);
|
||||
|
||||
assertThat(mContentProtectionEventProcessor.mPasswordFieldDetected).isFalse();
|
||||
assertThat(mContentProtectionEventProcessor.mSuspiciousTextDetected).isFalse();
|
||||
verify(mMockEventBuffer, times(2)).clear();
|
||||
verify(mMockEventBuffer, times(2)).toArray();
|
||||
}
|
||||
|
||||
@Test
|
||||
public void isPasswordField_android() {
|
||||
ContentCaptureEvent event =
|
||||
createAndroidPasswordFieldEvent(
|
||||
ANDROID_CLASS_NAME, InputType.TYPE_TEXT_VARIATION_PASSWORD);
|
||||
|
||||
mContentProtectionEventProcessor.processEvent(event);
|
||||
|
||||
assertThat(mContentProtectionEventProcessor.mPasswordFieldDetected).isTrue();
|
||||
verify(mMockEventBuffer, never()).clear();
|
||||
verify(mMockEventBuffer, never()).toArray();
|
||||
}
|
||||
|
||||
@Test
|
||||
public void isPasswordField_android_withoutClassName() {
|
||||
ContentCaptureEvent event =
|
||||
createAndroidPasswordFieldEvent(
|
||||
/* className= */ null, InputType.TYPE_TEXT_VARIATION_PASSWORD);
|
||||
|
||||
mContentProtectionEventProcessor.processEvent(event);
|
||||
|
||||
assertThat(mContentProtectionEventProcessor.mPasswordFieldDetected).isFalse();
|
||||
verify(mMockEventBuffer, never()).clear();
|
||||
verify(mMockEventBuffer, never()).toArray();
|
||||
}
|
||||
|
||||
@Test
|
||||
public void isPasswordField_android_wrongClassName() {
|
||||
ContentCaptureEvent event =
|
||||
createAndroidPasswordFieldEvent(
|
||||
"wrong.prefix" + ANDROID_CLASS_NAME,
|
||||
InputType.TYPE_TEXT_VARIATION_PASSWORD);
|
||||
|
||||
mContentProtectionEventProcessor.processEvent(event);
|
||||
|
||||
assertThat(mContentProtectionEventProcessor.mPasswordFieldDetected).isFalse();
|
||||
verify(mMockEventBuffer, never()).clear();
|
||||
verify(mMockEventBuffer, never()).toArray();
|
||||
}
|
||||
|
||||
@Test
|
||||
public void isPasswordField_android_wrongInputType() {
|
||||
ContentCaptureEvent event =
|
||||
createAndroidPasswordFieldEvent(
|
||||
ANDROID_CLASS_NAME, InputType.TYPE_TEXT_VARIATION_NORMAL);
|
||||
|
||||
mContentProtectionEventProcessor.processEvent(event);
|
||||
|
||||
assertThat(mContentProtectionEventProcessor.mPasswordFieldDetected).isFalse();
|
||||
verify(mMockEventBuffer, never()).clear();
|
||||
verify(mMockEventBuffer, never()).toArray();
|
||||
}
|
||||
|
||||
@Test
|
||||
public void isPasswordField_webView() {
|
||||
when(mMockEventBuffer.toArray()).thenReturn(new ContentCaptureEvent[0]);
|
||||
|
||||
ContentCaptureEvent event =
|
||||
createWebViewPasswordFieldEvent(
|
||||
/* className= */ null, /* eventText= */ null, PASSWORD_TEXT);
|
||||
|
||||
mContentProtectionEventProcessor.processEvent(event);
|
||||
|
||||
assertThat(mContentProtectionEventProcessor.mPasswordFieldDetected).isFalse();
|
||||
verify(mMockEventBuffer).clear();
|
||||
verify(mMockEventBuffer).toArray();
|
||||
}
|
||||
|
||||
@Test
|
||||
public void isPasswordField_webView_withClassName() {
|
||||
ContentCaptureEvent event =
|
||||
createWebViewPasswordFieldEvent(
|
||||
/* className= */ "any.class.name", /* eventText= */ null, PASSWORD_TEXT);
|
||||
|
||||
mContentProtectionEventProcessor.processEvent(event);
|
||||
|
||||
assertThat(mContentProtectionEventProcessor.mPasswordFieldDetected).isFalse();
|
||||
verify(mMockEventBuffer, never()).clear();
|
||||
verify(mMockEventBuffer, never()).toArray();
|
||||
}
|
||||
|
||||
@Test
|
||||
public void isPasswordField_webView_withSafeViewNodeText() {
|
||||
ContentCaptureEvent event =
|
||||
createWebViewPasswordFieldEvent(
|
||||
/* className= */ null, /* eventText= */ null, SAFE_TEXT);
|
||||
|
||||
mContentProtectionEventProcessor.processEvent(event);
|
||||
|
||||
assertThat(mContentProtectionEventProcessor.mPasswordFieldDetected).isFalse();
|
||||
verify(mMockEventBuffer, never()).clear();
|
||||
verify(mMockEventBuffer, never()).toArray();
|
||||
}
|
||||
|
||||
@Test
|
||||
public void isPasswordField_webView_withEventText() {
|
||||
ContentCaptureEvent event =
|
||||
createWebViewPasswordFieldEvent(/* className= */ null, PASSWORD_TEXT, SAFE_TEXT);
|
||||
|
||||
mContentProtectionEventProcessor.processEvent(event);
|
||||
|
||||
assertThat(mContentProtectionEventProcessor.mPasswordFieldDetected).isFalse();
|
||||
verify(mMockEventBuffer, never()).clear();
|
||||
verify(mMockEventBuffer, never()).toArray();
|
||||
}
|
||||
|
||||
@Test
|
||||
public void isSuspiciousText_withSafeText() {
|
||||
ContentCaptureEvent event = createSuspiciousTextEvent(SAFE_TEXT, SAFE_TEXT);
|
||||
|
||||
mContentProtectionEventProcessor.processEvent(event);
|
||||
|
||||
assertThat(mContentProtectionEventProcessor.mSuspiciousTextDetected).isFalse();
|
||||
verify(mMockEventBuffer, never()).clear();
|
||||
verify(mMockEventBuffer, never()).toArray();
|
||||
}
|
||||
|
||||
@Test
|
||||
public void isSuspiciousText_eventText_suspiciousText() {
|
||||
ContentCaptureEvent event = createSuspiciousTextEvent(SUSPICIOUS_TEXT, SAFE_TEXT);
|
||||
|
||||
mContentProtectionEventProcessor.processEvent(event);
|
||||
|
||||
assertThat(mContentProtectionEventProcessor.mSuspiciousTextDetected).isTrue();
|
||||
verify(mMockEventBuffer, never()).clear();
|
||||
verify(mMockEventBuffer, never()).toArray();
|
||||
}
|
||||
|
||||
@Test
|
||||
public void isSuspiciousText_viewNodeText_suspiciousText() {
|
||||
ContentCaptureEvent event = createSuspiciousTextEvent(SAFE_TEXT, SUSPICIOUS_TEXT);
|
||||
|
||||
mContentProtectionEventProcessor.processEvent(event);
|
||||
|
||||
assertThat(mContentProtectionEventProcessor.mSuspiciousTextDetected).isTrue();
|
||||
verify(mMockEventBuffer, never()).clear();
|
||||
verify(mMockEventBuffer, never()).toArray();
|
||||
}
|
||||
|
||||
@Test
|
||||
public void isSuspiciousText_eventText_passwordText() {
|
||||
ContentCaptureEvent event = createSuspiciousTextEvent(PASSWORD_TEXT, SAFE_TEXT);
|
||||
|
||||
mContentProtectionEventProcessor.processEvent(event);
|
||||
|
||||
assertThat(mContentProtectionEventProcessor.mSuspiciousTextDetected).isTrue();
|
||||
verify(mMockEventBuffer, never()).clear();
|
||||
verify(mMockEventBuffer, never()).toArray();
|
||||
}
|
||||
|
||||
@Test
|
||||
public void isSuspiciousText_viewNodeText_passwordText() {
|
||||
// Specify the class to differ from {@link isPasswordField_webView} test in this version
|
||||
ContentCaptureEvent event =
|
||||
createProcessEvent(
|
||||
"test.class.not.a.web.view", /* inputType= */ 0, SAFE_TEXT, PASSWORD_TEXT);
|
||||
|
||||
mContentProtectionEventProcessor.processEvent(event);
|
||||
|
||||
assertThat(mContentProtectionEventProcessor.mSuspiciousTextDetected).isTrue();
|
||||
verify(mMockEventBuffer, never()).clear();
|
||||
verify(mMockEventBuffer, never()).toArray();
|
||||
}
|
||||
|
||||
private static ContentCaptureEvent createEvent(int type) {
|
||||
return new ContentCaptureEvent(/* sessionId= */ 123, type);
|
||||
}
|
||||
|
||||
private static ContentCaptureEvent createStoreEvent() {
|
||||
return createEvent(TYPE_VIEW_TEXT_CHANGED);
|
||||
}
|
||||
|
||||
private static ContentCaptureEvent createProcessEvent() {
|
||||
return createEvent(TYPE_VIEW_APPEARED);
|
||||
}
|
||||
|
||||
private ContentCaptureEvent createProcessEvent(
|
||||
@Nullable String className,
|
||||
int inputType,
|
||||
@Nullable String eventText,
|
||||
@Nullable String viewNodeText) {
|
||||
View view = new View(mContext);
|
||||
ViewStructureImpl viewStructure = new ViewStructureImpl(view);
|
||||
if (className != null) {
|
||||
viewStructure.setClassName(className);
|
||||
}
|
||||
if (viewNodeText != null) {
|
||||
viewStructure.setText(viewNodeText);
|
||||
}
|
||||
viewStructure.setInputType(inputType);
|
||||
|
||||
ContentCaptureEvent event = createProcessEvent();
|
||||
event.setViewNode(viewStructure.getNode());
|
||||
if (eventText != null) {
|
||||
event.setText(eventText);
|
||||
}
|
||||
|
||||
return event;
|
||||
}
|
||||
|
||||
private ContentCaptureEvent createAndroidPasswordFieldEvent(
|
||||
@Nullable String className, int inputType) {
|
||||
return createProcessEvent(
|
||||
className, inputType, /* eventText= */ null, /* viewNodeText= */ null);
|
||||
}
|
||||
|
||||
private ContentCaptureEvent createWebViewPasswordFieldEvent(
|
||||
@Nullable String className, @Nullable String eventText, @Nullable String viewNodeText) {
|
||||
return createProcessEvent(className, /* inputType= */ 0, eventText, viewNodeText);
|
||||
}
|
||||
|
||||
private ContentCaptureEvent createSuspiciousTextEvent(
|
||||
@Nullable String eventText, @Nullable String viewNodeText) {
|
||||
return createProcessEvent(
|
||||
/* className= */ null, /* inputType= */ 0, eventText, viewNodeText);
|
||||
}
|
||||
}
|
||||
Reference in New Issue
Block a user