[CB-4952] resolveLocalFileSystemURI returns SECURITY_ERROR wrongly in iOS

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 3.0.0
• Component/s: cordova-ios, cordova-plugin-file

Environment

iOS

• Assignee: Ian Clelland
• Reporter: Kuan Yi Ming
• Created: 30/Sep/13 09:12
• Updated: 23/Aug/18 07:18
• Resolved: 03/Mar/14 16:28

Description

The simplified version of resolveLocalFileSystemURI in the 3.0.0 file plugin doesn't properly check the URI if it's in the tmp or Documents folder and returns FileError.SECURITY_ERROR instead. This doesn't occur in 2.9.0.

For example, trying to resolve a URI of a video file from using getPicture().

Calling the following lines in CDVFile.m using the above example:

NSLog(@"url path: %@", path);
NSLog(@"docs path: %@", self.appDocsPath);
NSLog(@"temp path: %@", self.appTempPath);

returns these:
url path: /private/var/mobile/Applications/[app id]/tmp//trim.TpPlJN.MOV
docs path: /var/mobile/Applications/[app id]/Documents
temp path: /var/mobile/Applications/[app id]/tmp

Since the security error check uses hasPrefix against self.appDocsPath and self.appTempPath here, it fails the check.