SEBWIN-308: Implemented mechanism to block uploads.

This commit is contained in:
dbuechel 2020-01-24 10:19:11 +01:00
parent c1aa080f87
commit b003bf93b7
4 changed files with 27 additions and 10 deletions

View file

@ -216,6 +216,12 @@ namespace SafeExamBrowser.Browser
} }
private void DialogHandler_DialogRequested(DialogRequestedEventArgs args) private void DialogHandler_DialogRequested(DialogRequestedEventArgs args)
{
var isDownload = args.Operation == FileSystemOperation.Save;
var isUpload = args.Operation == FileSystemOperation.Open;
var isAllowed = (isDownload && settings.AllowDownloads) || (isUpload && settings.AllowUploads);
if (isAllowed)
{ {
var result = fileSystemDialog.Show(args.Element, args.Operation, args.InitialPath, title: args.Title, owner: window); var result = fileSystemDialog.Show(args.Element, args.Operation, args.InitialPath, title: args.Title, owner: window);
@ -230,6 +236,11 @@ namespace SafeExamBrowser.Browser
logger.Debug($"User aborted file system dialog to {args.Operation}->{args.Element}."); logger.Debug($"User aborted file system dialog to {args.Operation}->{args.Element}.");
} }
} }
else
{
logger.Info($"Blocked file system dialog to {args.Operation}->{args.Element}, as {(isDownload ? "downloading" : "uploading")} is not allowed.");
}
}
private void DisplayHandler_FaviconChanged(string uri) private void DisplayHandler_FaviconChanged(string uri)
{ {

View file

@ -30,8 +30,8 @@ namespace SafeExamBrowser.Configuration.ConfigurationData.DataMapping
case Keys.Browser.AllowDeveloperConsole: case Keys.Browser.AllowDeveloperConsole:
MapAllowDeveloperConsole(settings, value); MapAllowDeveloperConsole(settings, value);
break; break;
case Keys.Browser.AllowDownloads: case Keys.Browser.AllowDownloadsAndUploads:
MapAllowDownloads(settings, value); MapAllowDownloadsAndUploads(settings, value);
break; break;
case Keys.Browser.AllowPageZoom: case Keys.Browser.AllowPageZoom:
MapAllowPageZoom(settings, value); MapAllowPageZoom(settings, value);
@ -162,11 +162,12 @@ namespace SafeExamBrowser.Configuration.ConfigurationData.DataMapping
} }
} }
private void MapAllowDownloads(AppSettings settings, object value) private void MapAllowDownloadsAndUploads(AppSettings settings, object value)
{ {
if (value is bool allow) if (value is bool allow)
{ {
settings.Browser.AllowDownloads = allow; settings.Browser.AllowDownloads = allow;
settings.Browser.AllowUploads = allow;
} }
} }

View file

@ -44,7 +44,7 @@ namespace SafeExamBrowser.Configuration.ConfigurationData
internal const string AllowConfigurationDownloads = "downloadAndOpenSebConfig"; internal const string AllowConfigurationDownloads = "downloadAndOpenSebConfig";
internal const string AllowCustomDownloadLocation = "allowCustomDownloadLocation"; internal const string AllowCustomDownloadLocation = "allowCustomDownloadLocation";
internal const string AllowDeveloperConsole = "allowDeveloperConsole"; internal const string AllowDeveloperConsole = "allowDeveloperConsole";
internal const string AllowDownloads = "allowDownUploads"; internal const string AllowDownloadsAndUploads = "allowDownUploads";
internal const string AllowPageZoom = "enableZoomPage"; internal const string AllowPageZoom = "enableZoomPage";
internal const string CustomUserAgentDesktop = "browserUserAgentWinDesktopModeCustom"; internal const string CustomUserAgentDesktop = "browserUserAgentWinDesktopModeCustom";
internal const string CustomUserAgentMobile = "browserUserAgentWinTouchModeCustom"; internal const string CustomUserAgentMobile = "browserUserAgentWinTouchModeCustom";

View file

@ -41,6 +41,11 @@ namespace SafeExamBrowser.Settings.Browser
/// </summary> /// </summary>
public bool AllowPageZoom { get; set; } public bool AllowPageZoom { get; set; }
/// <summary>
/// Determines whether the user will be allowed to upload files.
/// </summary>
public bool AllowUploads { get; set; }
/// <summary> /// <summary>
/// Determines whether the user needs to confirm the termination of SEB by <see cref="QuitUrl"/>. /// Determines whether the user needs to confirm the termination of SEB by <see cref="QuitUrl"/>.
/// </summary> /// </summary>