Skip to content
Commit 850fd984 authored by Ioana Alexandru's avatar Ioana Alexandru
Browse files

Implement visitUris for RemoteViews ViewGroupActionAdd.

This is to prevent a vulnerability where notifications can show
resources belonging to other users, since the URI in the nested views
was not being checked.

Bug: 277740082
Test: atest RemoteViewsTest NotificationVisitUrisTest
Change-Id: I5c71f0bad0a6f6361eb5ceffe8d1e47e936d78f8
Merged-In: I5c71f0bad0a6f6361eb5ceffe8d1e47e936d78f8
parent 71e7d412
Loading
Loading
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment