tree 7b45306401ec864cd5a4c52d0df6ed92826b22f0
parent 71e7d4129dcee66f4a2f5b3f4849bf50c61259d2
author Ioana Alexandru <aioana@google.com> 1683906069 +0000
committer Ioana Alexandru <aioana@google.com> 1684848567 +0000

Implement visitUris for RemoteViews ViewGroupActionAdd.

This is to prevent a vulnerability where notifications can show
resources belonging to other users, since the URI in the nested views
was not being checked.

Bug: 277740082
Test: atest RemoteViewsTest NotificationVisitUrisTest
Change-Id: I5c71f0bad0a6f6361eb5ceffe8d1e47e936d78f8
Merged-In: I5c71f0bad0a6f6361eb5ceffe8d1e47e936d78f8