Merge "Fix html injection in Autofill confirmation dialog" into tm-qpr-dev
This commit is contained in:
committed by
Android (Google) Code Review
commit
ecb7c54fc5
@@ -243,7 +243,7 @@ public class DefaultAutofillPicker extends DefaultAppPickerFragment {
|
|||||||
}
|
}
|
||||||
final CharSequence appName = appInfo.loadLabel();
|
final CharSequence appName = appInfo.loadLabel();
|
||||||
final String message = getContext().getString(
|
final String message = getContext().getString(
|
||||||
R.string.autofill_confirmation_message, appName);
|
R.string.autofill_confirmation_message, Html.escapeHtml(appName));
|
||||||
return Html.fromHtml(message);
|
return Html.fromHtml(message);
|
||||||
}
|
}
|
||||||
|
|
||||||
|
Reference in New Issue
Block a user