Merge "Fix WebView vulnerability by disallowing file access"