tree 86d019c8cb29b89390d1934007de9119de3663e7
parent be8e0d00c228f6229bb35d21ceb2595dd3fc0de9
author Jeff Sharkey <jsharkey@android.com> 1532551934 -0600
committer Jeff Sharkey <jsharkey@android.com> 1532553956 -0600

Extend SQLiteQueryBuilder for update and delete.

Developers often accept selection clauses from untrusted code, and
SQLiteQueryBuilder already supports a "strict" mode to help catch
SQL injection attacks.  This change extends the builder to support
update() and delete() calls, so that we can help secure those
selection clauses too.

Bug: 111085900
Test: atest packages/providers/DownloadProvider/tests/
Test: atest cts/tests/app/src/android/app/cts/DownloadManagerTest.java
Test: atest cts/tests/tests/database/src/android/database/sqlite/cts/SQLiteQueryBuilderTest.java
Change-Id: Ib4fc8400f184755ee7e971ab5f2095186341730c