chromeos: Check both original and absolute paths for file: scheme
Previously, paths not in the whitelist were accessible through
symbolic links via file: scheme. This patch solves this
problem by checking both original and absolute paths (i.e.
symbolic link is resolved with the latter).
It is a known issue that this approach has a race between
time to check the resolved path and time to read the path.
BUG=677933
TEST=confirm that paths not in the whitelist cannot be accessed via symbolic links on Chrome OS
CQ_INCLUDE_TRYBOTS=master.tryserver.chromium.android:android_cronet_tester
Review-Url: https://codereview.chromium.org/2786583002
Cr-Commit-Position: refs/heads/master@{#475299}
41 files changed
