| commit | 6d6cd68660635d670b0cb17f348b7c1da13704b3 | [log] [tgz] |
|---|---|---|
| author | Seigo Nonaka <nona@google.com> | Thu Jun 22 08:22:18 2017 -0700 |
| committer | Seigo Nonaka <nona@google.com> | Thu Jun 22 08:36:03 2017 -0700 |
| tree | 46ff413dabcfa566e5e7174ed24b41da1ce13ec8 | |
| parent | 58aeff811f2da99537a8a9531fc58cea8ffbb867 [diff] |
Stop loading other package's font by default. Since CONTEXT_RESTRICTED is not a default flag of createPackageContext, we can't rely on it for preventing unexpected font injections. To protect developers and existing apps from a risk of font injection, stop loading font from other package's resouce unless the developer explicitly set CONTEXT_IGNORE_SECURITY. Bug: 62813533 Bug: 62879353 Test: Manually done Change-Id: I4442ddc48dadb5c968b444be86038b602074d301