| commit | df9a44e1fb3968c6e3121aa76515a58f5e69fbee | [log] [tgz] |
|---|---|---|
| author | Zim <zezeozue@google.com> | Wed Dec 16 10:36:40 2020 +0000 |
| committer | Zim <zezeozue@google.com> | Wed Dec 16 10:36:40 2020 +0000 |
| tree | ac1580bc80d0d660e81238d075e9a3e5882c2f4c | |
| parent | 302b47583976bb077c69c5671f8da8a4ccc8f2b1 [diff] |
Make low storage notification PendingIntent immutable Malicious apps, especially NotificationListeners can hijack such intents and grant themselves access to sensitive URIs by relying on the OS URI granting mechanism. This change mitigates the security issue and also adheres to the new enforcement requiring Android S+ targeting apps to explicitly specifiy a mutability flag. Test: Manual Bug: 153466381 Change-Id: If478386d68cf25c8f93c2685824700679e6b9ea9