expo-clipboard 4.8.0 → 5.0.0

package/CHANGELOG.md

@@ -10,6 +10,12 @@
 
 ### 💡 Others
 
+## 5.0.0 — 2023-12-12
+
+### 🐛 Bug fixes
+
+- [Android] Fix path traversal vulnerability in `getFileForUri` function. ([#25549](https://github.com/expo/expo/pull/25549) by [@behenate](https://github.com/behenate))
+
 ## 4.8.0 — 2023-11-14
 
 ### 🛠 Breaking changes

package/android/build.gradle

@@ -3,7 +3,7 @@ apply plugin: 'kotlin-android'
 apply plugin: 'maven-publish'
 
 group = 'host.exp.exponent'
-version = '4.8.0'
+version = '5.0.0'
 
 def expoModulesCorePlugin = new File(project(":expo-modules-core").projectDir.absolutePath, "ExpoModulesCorePlugin.gradle")
 if (expoModulesCorePlugin.exists()) {
@@ -94,7 +94,7 @@ android {
   namespace "expo.modules.clipboard"
   defaultConfig {
     versionCode 3
-    versionName '4.8.0'
+    versionName '5.0.0'
   }
 }
 

package/android/src/main/java/expo/modules/clipboard/ClipboardFileProvider.kt

@@ -348,7 +348,7 @@ class ClipboardFileProvider : ContentProvider() {
       } catch (e: IOException) {
         throw java.lang.IllegalArgumentException("Failed to resolve canonical path for $file")
       }
-      if (!file.path.startsWith(root.path)) {
+      if (!file.startsWith(root)) {
         throw SecurityException("Resolved path jumped beyond configured root")
       }
       return file

package/ios/Tests/ClipboardModuleSpec.swift

@@ -6,7 +6,7 @@ import UIKit
 import MobileCoreServices
 
 class ClipboardModuleSpec: ExpoSpec {
-  override func spec() {
+  override class func spec() {
     let appContext = AppContext.create()
     let holder = ModuleHolder(appContext: appContext, module: ClipboardModule(appContext: appContext))
 
@@ -24,7 +24,9 @@ class ClipboardModuleSpec: ExpoSpec {
     func expectModuleFunctionThrows<T>(_ functionName: String, args: [Any], exception: T.Type) where T: Exception {
       waitUntil(timeout: .seconds(3)) { done in
         holder.call(function: functionName, args: args) { result in
-          expect(result).to(beFailure(exception: exception))
+          expect(result).to(beFailure { error in
+            expect(error.rootCause is T).to(beTrue())
+          })
           done()
         }
       }
@@ -304,16 +306,3 @@ class ClipboardModuleSpec: ExpoSpec {
     }
   }
 }
-
-// TODO: (barthap) Replace this with built-in beFailure() when upgraded to Nimble 10.0
-func beFailure<Success, Failure, T: Exception>(exception: T.Type) -> Nimble.Predicate<Result<Success, Failure>> {
-  return Predicate.simple("be \(exception)") { actualExpression in
-    guard let actual = try actualExpression.evaluate(),
-          case let .failure(error) = actual,
-          (error as? Exception)?.rootCause is T
-    else {
-      return .doesNotMatch
-    }
-    return .matches
-  }
-}

package/ios/Tests/MockNSAttributedString.swift

@@ -14,7 +14,10 @@ class MockNSAttributedString: NSAttributedString {
   }
 
   override var rtfData: Data? {
-    return try? self.data(from: NSRange(location: 0, length: self.length))
+    return try? self.data(
+      from: NSRange(location: 0, length: self.length),
+      documentAttributes: [.documentType: NSAttributedString.DocumentType.rtf]
+    )
   }
 
   override var htmlString: String? {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "expo-clipboard",
-  "version": "4.8.0",
+  "version": "5.0.0",
   "description": "ExpoClipboard standalone module",
   "main": "build/Clipboard.js",
   "types": "build/Clipboard.d.ts",
@@ -39,5 +39,5 @@
   "jest": {
     "preset": "expo-module-scripts/universal"
   },
-  "gitHead": "3142a086578deffd8704a8f1b6f0f661527d836c"
+  "gitHead": "6aca7ce098ddc667776a3d7cf612adbb985e264a"
 }