PendingIntent in MediaOutputIndicatorSlice could be Hijacked
-Add setPackage() to prevent local information disclosure Bug: 151645695 Test: make -j42 RunSettingsRoboTests Change-Id: I74c058a381fceb85695dd76d354fb49f878f9142
This commit is contained in:
@@ -106,6 +106,7 @@ public class MediaOutputIndicatorSlice implements CustomSliceable {
|
||||
public void onNotifyChange(Intent i) {
|
||||
final MediaController mediaController = getWorker().getActiveLocalMediaController();
|
||||
final Intent intent = new Intent()
|
||||
.setPackage(Utils.SETTINGS_PACKAGE_NAME)
|
||||
.setAction(MediaOutputSliceConstants.ACTION_MEDIA_OUTPUT)
|
||||
.addFlags(Intent.FLAG_ACTIVITY_NEW_TASK);
|
||||
if (mediaController != null) {
|
||||
|
Reference in New Issue
Block a user