commit 0a0778e96d7da3fa8169abdf9261ed62809539fa
author Nan Wu <wnan@google.com> Thu Jun 22 14:27:51 2023 +0000
committer Nan Wu <wnan@google.com> Mon Jul 10 13:07:08 2023 +0000
tree 1a7d9568187e77dbc043779bbb1517068172973f
parent cbba85d2331e51e00dcbc7054ed8c6781d93d3e1

Rescind BAL privilege when ShortcutService sends the callback PI

When AppWidgetManager.requestPinAppWidget is called from a client,
The passed in callback PendingIntent is called from the system
server. This allows the PendingIntent to be able to bypass BAL
checks.

Bug: 278722815
Test: manual test. BackgroundActivityLaunchTest. Regression like
      RequestPinAppWidgetTest, PeopleSpaceWidgetManagerTest, etc.
Merged-In: I2df9de272192c9a149a9ff519c96e6e0e8304040
Change-Id: I2df9de272192c9a149a9ff519c96e6e0e8304040
(cherry picked from commit eb90469587d908ac89121baf4f4dca3d1da5b817)