Oli Lan 8950a90024 Prevent exfiltration of system files via user image settings.
This is a backport of ag/17005706.

This adds mitigations to prevent system files being exfiltrated
via the settings content provider when a content URI is provided
as a chosen user image.

The mitigations are:

1) Copy the image to a new URI rather than the existing takePictureUri
prior to cropping.

2) Only allow a system handler to respond to the CROP intent.

Bug: 187702830
Test: build and check functionality
Change-Id: Ia6314b6810afb5efa0329f3eeaee9ccfff791966
Merged-In: I15e15ad88b768a5b679de32c5429d921d850a3cb
2022-03-03 13:18:16 +00:00
2019-03-27 07:14:20 +08:00
2019-04-04 12:49:15 -07:00
2019-03-27 07:14:20 +08:00
2019-01-11 16:41:54 +00:00
2019-05-02 01:44:42 +00:00
2019-02-06 15:44:40 +00:00
Description
No description provided
3.1 GiB
Languages
Java 89.8%
Kotlin 10.2%