tree 15597ca549d4688923ea31820bbc8a618c6dfe1e
parent 2dfee227ff77b0a83f9c36bb516fe98c5440e025
author Hall Liu <hallliu@google.com> 1565659140 -0700
committer Hall Liu <hallliu@google.com> 1573253411 -0800

DO NOT MERGE Fix the remaining holes for access to APN data

Add the following checks for preventing unauthorized access to the APN
username and password fields in the carrier db:
1. Check the query for sensitive fields no matter what URI is being
queried
2. Perform a case-insensitive search for sensitive fields
3. Always check the permission for accessing username/password if any
part of the query contains a subquery (detected via looking for the
"select" token).

Bug: 138802882
Test: CTS
Change-Id: I59b297642d2000dde0a83f77b20112c7382b7ef1
Merged-In: I59b297642d2000dde0a83f77b20112c7382b7ef1