NativeScript
diff --git a/‎src/assets/app/mainpage.js‎
Lines changed: 1 addition & 0 deletions b/‎src/assets/app/mainpage.js‎
Lines changed: 1 addition & 0 deletions
diff --git a/‎src/assets/app/tests/testIfAbleToRunExternalFile.js‎
Lines changed: 34 additions & 0 deletions b/‎src/assets/app/tests/testIfAbleToRunExternalFile.js‎
Lines changed: 34 additions & 0 deletions
diff --git a/‎src/jni/NativeScriptRuntime.cpp‎
Lines changed: 9 additions & 0 deletions b/‎src/jni/NativeScriptRuntime.cpp‎
Lines changed: 9 additions & 0 deletions
diff --git a/‎src/src/com/tns/Require.java‎
Lines changed: 3 additions & 3 deletions b/‎src/src/com/tns/Require.java‎
Lines changed: 3 additions & 3 deletions
@@ -11,6 +11,7 @@ require("./tests/stringConversionTests");
 require("./tests/testsForTypescript");
 require("./tests/testGC");
 require("./tests/testsMemoryManagement");
+require("./tests/testIfAbleToRunExternalFile");
 
 var MainActivity = com.tns.NativeScriptActivity.extends({
 			   onCreate: function() {
 
@@ -0,0 +1,34 @@
+var Assert = function(condition, failMessage) {
+	if	(condition == false) {
+		fail(failMessage);
+	}
+}
+
+var When_file_outside_the_project_folder_is_required_it_should_fail = function() {
+
+	Log("When_file_outside_the_project_folder_is_required_it_should_throw_IllegalAccessException"); 
+
+	var illegalAccesExceptionCaught = false;
+	var fileSeparator = "/";
+	var nonExistingFileName = "nonExistingFile";
+	var nonExistingFileExtension = ".js";
+	
+	//create a file in external storage
+	var pathToExternalStorage = android.os.Environment.getExternalStorageDirectory().toString();
+	var appDirectory = new java.io.File(pathToExternalStorage + fileSeparator + nonExistingFileName + nonExistingFileExtension);
+	appDirectory.mkdirs();
+	
+	try
+	{
+		//try to require it with absolute path (requireing files with absolute path should not be possible)
+		require(pathToExternalStorage + fileSeparator + nonExistingFileName);
+	}
+	catch(e)
+	{
+		exceptionCaught = true;
+	}
+	
+	Assert(exceptionCaught === true, "When_file_outside_the_project_folder_is_required_it_should_fail FAILED: Exception(illegal access) should be thrown");
+}
+
+When_file_outside_the_project_folder_is_required_it_should_fail();
@@ -862,6 +862,15 @@ void NativeScriptRuntime::RequireCallback(const v8::FunctionCallbackInfo<v8::Val
 		ExceptionUtil::GetInstance()->HandleInvalidState(exception, false);
 		return;
 	}
+	if (modulePath == "EXTERNAL_FILE_ERROR")
+	{
+		// module not found
+		stringstream ss;
+		ss << "Module \"" << moduleName << "\" is located on the external storage. Modules can be private application files ONLY";
+		string exception = ss.str();
+		ExceptionUtil::GetInstance()->HandleInvalidState(exception, false);
+		return;
+	}
 
 	auto it = loadedModules.find(modulePath);
 
 
@@ -109,7 +109,7 @@ public static String getModulePath(String moduleName, String callingModuleName)
 			File projectRootDir = new File(RootPackageDir);
 			if (isFileExternal(file, projectRootDir))
 			{
-				throw new IllegalAccessError();
+				return "EXTERNAL_FILE_ERROR";
 			}
 			else
 			{
@@ -128,12 +128,12 @@ private static boolean isFileExternal(File source, File target)
 
 		while (currentParentDir != null)
 		{
-			currentParentDir = currentParentDir.getParentFile();
-
 			if (currentParentDir.equals(target))
 			{
 				return false;
 			}
+
+			currentParentDir = currentParentDir.getParentFile();
 		}
 
 		return true;
Original file line number	Diff line number	Diff line change
`@@ -109,7 +109,7 @@ public static String getModulePath(String moduleName, String callingModuleName)`
`109`	`109`	`File projectRootDir = new File(RootPackageDir);`
`110`	`110`	`if (isFileExternal(file, projectRootDir))`
`111`	`111`	`{`
`112`		`- throw new IllegalAccessError();`
	`112`	`+ return "EXTERNAL_FILE_ERROR";`
`113`	`113`	`}`
`114`	`114`	`else`
`115`	`115`	`{`
`@@ -128,12 +128,12 @@ private static boolean isFileExternal(File source, File target)`
`128`	`128`
`129`	`129`	`while (currentParentDir != null)`
`130`	`130`	`{`
`131`		`- currentParentDir = currentParentDir.getParentFile();`
`132`		`-`
`133`	`131`	`if (currentParentDir.equals(target))`
`134`	`132`	`{`
`135`	`133`	`return false;`
`136`	`134`	`}`
	`135`	`+`
	`136`	`+ currentParentDir = currentParentDir.getParentFile();`
`137`	`137`	`}`
`138`	`138`
`139`	`139`	`return true;`