Tsung-Mao Fang 4493d84ab2 Prevent HTML Injection on the Device Admin request screen
The root issue is that CharSequence is an interface.
String implements that interface, however, Spanned class
too which is a rich text format that can store HTML code.

The solution is enforce to use String type which won't include
any HTML function.

Test: Rebuilt apk and see the string without HTML style.
Bug: 179042963
Change-Id: I53b460b12da918e022d2f2934f114d205dbaadb0
Merged-In: I53b460b12da918e022d2f2934f114d205dbaadb0
(cherry picked from commit 0bf3c98b2f)
(cherry picked from commit 52f9039d5c)
2021-05-20 00:01:26 +00:00
2019-04-04 12:49:15 -07:00
2019-11-25 20:28:35 +09:00
2020-03-11 16:45:14 +08:00
2019-02-06 15:44:40 +00:00
2020-02-03 01:03:46 +00:00
Description
No description provided
3.1 GiB
Languages
Java 89.8%
Kotlin 10.2%