From d268a221dce09803d24a341543c9bc71fd09f3ce Mon Sep 17 00:00:00 2001 From: Christopher Tate Date: Fri, 19 Feb 2016 16:48:28 -0800 Subject: [PATCH] Implement wildcard-host policy in reference autoVerify implementation For intent filters that match "*.example.tld" hosts, we now look at https://example.tld/... to validate the claim. Change-Id: I9725058fa45e85c96ed4a07781b3f989ac6fd661 --- .../statementservice/IntentFilterVerificationReceiver.java | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/packages/StatementService/src/com/android/statementservice/IntentFilterVerificationReceiver.java b/packages/StatementService/src/com/android/statementservice/IntentFilterVerificationReceiver.java index 712347ab4fb7e..57809acc84b10 100644 --- a/packages/StatementService/src/com/android/statementservice/IntentFilterVerificationReceiver.java +++ b/packages/StatementService/src/com/android/statementservice/IntentFilterVerificationReceiver.java @@ -106,6 +106,10 @@ public final class IntentFilterVerificationReceiver extends BroadcastReceiver { try { ArrayList sourceAssets = new ArrayList(); for (String host : hostList) { + // "*.example.tld" is validated via https://example.tld + if (host.startsWith("*.")) { + host = host.substring(2); + } sourceAssets.add(createWebAssetString(scheme, host)); } extras.putStringArrayList(DirectStatementService.EXTRA_SOURCE_ASSET_DESCRIPTORS,