Carlos Valdivia f5d3e74ecc SECURITY: Don't pass a usable Pending Intent to 3rd parties. ...

Unfortunately the Settings app has super powers. We shouldn't let
untrusted 3rd party authenticators re-purpose those powers to their own
nefarious ends.  This means that we shouldn't pass along PendingIntents
that can have addressing information (component, action, category)
filled in by third parties.

Bug: 17356824
Change-Id: I397d26c5f465ddfb0e58bbc66cd44756e58cc507

2014-09-07 17:45:58 -07:00

9.2 KiB

Raw Blame History

View Raw