)]}'
{
  "commit": "44350b9b58ec3ebc151f215c8ff832cdc49995c1",
  "tree": "9d9bda774a90dba7c43eef94529a608e57074b73",
  "parents": [
    "40c7f1a6bbb7a0ac174ae73ad7e7507b671e872c"
  ],
  "author": {
    "name": "Winson",
    "email": "chiuwinson@google.com",
    "time": "Wed Oct 28 13:25:44 2020 -0700"
  },
  "committer": {
    "name": "Huizi Yang",
    "email": "yanghuiz@google.com",
    "time": "Wed Dec 09 15:55:08 2020 -0800"
  },
  "message": "Remove updateIntentVerificationStatusAsUser from ResolverActivity\n\nDO NOT CHERRY PICK ANYWHERE: Security issue\n\nThis API is meant to grant an app complete verification over the\ndomains it has declared, meaning it will always resolve the domains it\ndeclares for web links.\n\nThis can allow an app to take over links that are unowned. Any time a\nuser selects \"Always\" when resolving an Intent in the diambiguation\ndialog, this API would be called, and all subsequent resolutions of any\ndomain declared by the app selected would be automatically directed to\nthat app, with no prompt to the user.\n\nFrom a quick search, it\u0027s possible that all usages of this API are\nactually unintended and should be removed. Should be considered for\ndeprecation in the future.\n\nBug: 163358811\n\nTest: none, this is not generally testable, see linked bug for context\n\nMerged-In: Iff7f788a83af68c7fbb1c6b9a8be7b47136be2b6\nChange-Id: Iff7f788a83af68c7fbb1c6b9a8be7b47136be2b6\n(cherry picked from commit 7dc064e9edfb5dc3ffbac9d9392e38df3243df07)\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "233231cfcfdf0c3ceb82a1c656243d7f09012055",
      "old_mode": 33188,
      "old_path": "core/java/com/android/internal/app/ResolverActivity.java",
      "new_id": "fadc15912dc1e43803bb3a6dc6f20a2526455e90",
      "new_mode": 33188,
      "new_path": "core/java/com/android/internal/app/ResolverActivity.java"
    }
  ]
}