fix for malicious links in html tags and crashtag without securitymanager

apkreader · apkreader · commit c8d4e6ef552a · 2024-07-01T20:01:22.000+02:00
diff --git a/src/main/java/me/grax/jbytemod/ui/ClassTree.java b/src/main/java/me/grax/jbytemod/ui/ClassTree.java
@@ -67,7 +67,7 @@ public void refreshTree(JarArchive jar) {
         preloadMap = new HashMap<>();
         if (jar.getClasses() != null)
             for (ClassNode c : jar.getClasses().values()) {
-                String name = c.name;
+                String name = c.name.replace("<html>", "HTMLCrashtag");
                 String[] path = array_unique(name.split("/"));
                 name = String.join("/", path);
 
diff --git a/src/main/java/me/grax/jbytemod/ui/lists/MyCodeList.java b/src/main/java/me/grax/jbytemod/ui/lists/MyCodeList.java
@@ -584,7 +584,8 @@ public boolean loadFields(ClassNode cn) {
         this.currentClass = cn;
         this.currentMethod = null;
         LazyListModel<InstrEntry> lm = new LazyListModel<InstrEntry>();
-        editor.setText(cn.name + " Fields");
+        String crashFixClassName = cn.name.replace("<html>", "HTMLCrashtag");
+        editor.setText(crashFixClassName + " Fields");
         ArrayList<InstrEntry> entries = new ArrayList<>();
         for (FieldNode fn : cn.fields) {
             InstrEntry entry = new FieldEntry(cn, fn);
