tree c1ccd025c92ecf1eaaa0ff7605883b08e0a3de10
parent 0ebf094b7cdbd07df2dc0758cfdd1e10a01a22e2
author kumarashishg <kumarashishg@google.com> 1689595278 +0000
committer Ashish Kumar Gupta <kumarashishg@google.com> 1689694273 +0000

Resolve custom printer icon boundary exploit.

Because Settings grants the INTERACT_ACROSS_USERS_FULL permission, an exploit is possible where the third party print plugin service can pass other's User Icon URI. This CL provides a lightweight solution for parsing the image URI to detect profile exploitation.

Bug: 281525042
Test: Build and flash the code. Try to reproduce the issue with
mentioned steps in the bug

Change-Id: Iaaa6fe2a627a265c4d1d7b843a033a132e1fe2ce
Merged-In: Iaaa6fe2a627a265c4d1d7b843a033a132e1fe2ce