Merge "Fix html injection in Autofill confirmation dialog" into tm-qpr-dev am: ecb7c54fc5
am: b464bfa049
Original change: https://googleplex-android-review.googlesource.com/c/platform/packages/apps/Settings/+/20904550 Change-Id: I7be000514ace73753e35325fe9e62bb30679e15f Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
This commit is contained in:
@@ -243,7 +243,7 @@ public class DefaultAutofillPicker extends DefaultAppPickerFragment {
|
||||
}
|
||||
final CharSequence appName = appInfo.loadLabel();
|
||||
final String message = getContext().getString(
|
||||
R.string.autofill_confirmation_message, appName);
|
||||
R.string.autofill_confirmation_message, Html.escapeHtml(appName));
|
||||
return Html.fromHtml(message);
|
||||
}
|
||||
|
||||
|
Reference in New Issue
Block a user