app_Settings

Go to file

Tsung-Mao Fang b3c0a2a6c1 Fix pendingIntent in SettingsSliceProvider could be Hijacked

A malicious app is able to obtain this pending intent.
It can then mutate all fields except for the action and
launch the intent. This can be used to launch any activity
with the ACTION_SETTINGS action.

So, we enfore assign the package name for this intent,
it only can launch the settings app.

Fix: 147355897
Test: a) Install the new settings apk, and it won't launch other screen.
(See details in bug)
b) Start the settings search, slice search results work as normal.

Change-Id: Ie954d8a4b7153d6a4cac40621f363b45185990f2

2020-03-04 19:08:46 +08:00

libs

…

protos

Card showing mechanism change in homepage

2020-02-14 17:44:11 +08:00

res

Merge "Add string for output switcher transferring error" into rvc-dev am: 8c07f06cd5 am: 9aebc16b6a am: 0d7209e303 am: 8ae78e19a9

2020-03-04 01:56:34 +00:00

src/com/android/settings

Fix pendingIntent in SettingsSliceProvider could be Hijacked

2020-03-04 19:08:46 +08:00