)]}'
{
  "commit": "4d1f600cbcbbeb990e19bec4a386fb64f922ddd1",
  "tree": "c3874086f72187e784457fe543156cff0e103c4f",
  "parents": [
    "7d46aaa9199b9c9d3ddd33ce91d57e89a657d6e9"
  ],
  "author": {
    "name": "Yutong Zhang",
    "email": "zhangyutong@google.com",
    "time": "Thu Apr 30 06:09:20 2026 +0000"
  },
  "committer": {
    "name": "Android Build Coastguard Worker",
    "email": "android-build-coastguard-worker@google.com",
    "time": "Thu Jul 09 19:04:04 2026 -0700"
  },
  "message": "Autofill SaveUi URL validation and FLAG_IMMUTABLE\n\nThis change enhances the security of the Autofill Save UI by strictly enforcing http and https schemes for custom description links, preventing custom scheme hijacking. Additionally, it switches the PendingIntent created in SaveUi to be immutable (FLAG_IMMUTABLE), preventing potential intent manipulation by recipient applications.\n\nBug: 465446148\nTest: Verified with PoC test app\nTest: Verified with customized autofill test app\nTest: atest CtsAutoFillServiceTestCases\nFlag: EXEMPT CVE_FIX\nCherrypick-From: https://googleplex-android-review.googlesource.com/q/commit:e23397d2369608c73452d2c10149ff24bdc79bcc\nCherrypick-From: https://googleplex-android-review.googlesource.com/q/commit:77e4c23ebb29260587b2fe36cd4c820df23cedbe\nMerged-In: I32f07cac574a1073af13c04a789ff06f6a0ab90a\nChange-Id: I32f07cac574a1073af13c04a789ff06f6a0ab90a\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "369fc0aa7d111ce4c788ef08554a965dbecc61a7",
      "old_mode": 33188,
      "old_path": "services/autofill/java/com/android/server/autofill/ui/SaveUi.java",
      "new_id": "55dfb6f4b2dbdb5bdcddc9e08b0d302e9a211f83",
      "new_mode": 33188,
      "new_path": "services/autofill/java/com/android/server/autofill/ui/SaveUi.java"
    }
  ]
}