tree d658c9a111e72934565bcea8a2eda6f1cbcbfe66
parent 2977b43aaeb56140e19b2fb06cb7fd97d101018f
author Pranav Madapurmath <pmadapurmath@google.com> 1735859085 -0800
committer Android Build Coastguard Worker <android-build-coastguard-worker@google.com> 1736797563 -0800

Resolve cross account user icon validation.

Resolves a vulnerability found with the cross account user icon
validation in StatusHint and TelecomServiceImpl (when registering a
phone account). The reporter found that an uri formatted as `userId%`
isn't parsed properly with the existing reference to Uri.encodedUserInfo.

Bug: 376461551
Bug: 376259166
Flag: EXEMPT bugfix
Test: atest TelecomServiceImplTest
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:5f1be4f4b02ded791ad72725c4eef44287b08b1b)
Merged-In: I7a5f64ae01eaf6a133ea04c51bd00dbe1653b74f
Change-Id: I7a5f64ae01eaf6a133ea04c51bd00dbe1653b74f