Rescind BAL privilege when ShortcutService sends the callback PI
When AppWidgetManager.requestPinAppWidget is called from a client, The passed in callback PendingIntent is called from the system server. This allows the PendingIntent to be able to bypass BAL checks. Bug: 278722815 Test: manual test. BackgroundActivityLaunchTest. Regression like RequestPinAppWidgetTest, PeopleSpaceWidgetManagerTest, etc. Change-Id: I2df9de272192c9a149a9ff519c96e6e0e8304040
Loading
Please register or sign in to comment