commit | 68309a8c66b16fed45c86072ad68f4659f8ca4e0 | [log] [tgz] |
---|---|---|
author | Abhijeet Kaur <abkaur@google.com> | Thu Aug 13 12:21:15 2020 +0100 |
committer | android-build-team Robot <android-build-team-robot@google.com> | Tue Nov 10 14:32:11 2020 +0000 |
tree | 556037b9f5863007563b626378dd9e269a6a23ee | |
parent | 06c15cad847af87267fdd0a3c1c417bcdbb91bf0 [diff] |
Validate user-supplied URIs in DocumentsProvider calls Some URIs are used without validating their authorities which can lead to exploitation by malicious apps. Bug: 157294893 Test: Manual using test app in b/157294893 Change-Id: I799509ed5ff7e69140e84d796fe7f96d9dbfd32f Merged-In: I799509ed5ff7e69140e84d796fe7f96d9dbfd32f (cherry picked from commit 75f984bd32a3ee8115d5cea09ab1bd237537ab54) (cherry picked from commit e4bb1d7b6cd538acf423c7d8864dd26819fe8757)