Handle Exceptions during Intent parsing logic to avoid DoS attacks on Android

- Putting a custom Serializable class into an Intent sent to MainActivity of the Android app could cause a crash, which is easily avoidable with a try-catch

Author: balazsgerlei

androidApp/src/androidMain/kotlin/org/jetbrains/kotlinconf/android/MainActivity.kt

@@ -68,14 +68,18 @@ class MainActivity : ComponentActivity() {
     private fun processIntent(intent: Intent?) {
         if (intent == null) return
 
-        val notificationId = intent.getStringExtra(EXTRA_LOCAL_NOTIFICATION_ID)
-        if (notificationId != null) {
-            // Local notification clicked
-            navigateByLocalNotificationId(notificationId)
+        try {
+            val notificationId = intent.getStringExtra(EXTRA_LOCAL_NOTIFICATION_ID)
+            if (notificationId != null) {
+                // Local notification clicked
+                navigateByLocalNotificationId(notificationId)
+                return
+            }
+
+            // Process push notifications
+            NotifierManager.onCreateOrOnNewIntent(intent)
+        } catch (e: Exception) {
             return
         }
-
-        // Process push notifications
-        NotifierManager.onCreateOrOnNewIntent(intent)
     }
 }