)]}'
{
  "commit": "8df772fb59b4f688f09bc94c7afc9615cfb564dd",
  "tree": "f13aefb53a8f26baee64a05b7aed0b4a6f4a8345",
  "parents": [
    "a2f24fcecabdd20cb967c4d167f77277c93fb7e5"
  ],
  "author": {
    "name": "Yang Kudurshian",
    "email": "scarlety@google.com",
    "time": "Tue Mar 24 09:54:43 2026 -0700"
  },
  "committer": {
    "name": "Android Build Coastguard Worker",
    "email": "android-build-coastguard-worker@google.com",
    "time": "Thu Jul 09 19:00:49 2026 -0700"
  },
  "message": "Update URI permission granting logic in Intent Redirection Hardening\n\nUpdating the Intent URI Grant Permission logic to require explicit authorization from both callingUid and the intentCreatorUid.\nOnly if both parties are successfully authorized does the system proceed to use the caller\u0027s intent grants to access the requested URI. This maintains compatibility with the pre-hardening workflow as well.\n\n\nFor more detailed, please refer go/intent-redirection-2.\n\nBug: 477024345\nTest: Manually test exploit app won\u0027t work\nFlag: EXEMPT BUGFIX\nCherrypick-From: https://googleplex-android-review.googlesource.com/q/commit:73db64658dd35ab3ef781fc73983f1ee694111f0\nCherrypick-From: https://googleplex-android-review.googlesource.com/q/commit:0160b0a69e16852212b2cf19111d998781982e7c\nMerged-In: Ica84e8733595bd2dced557bade0811feacbded19\nChange-Id: Ica84e8733595bd2dced557bade0811feacbded19\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "2fe61e00c97e806c909c30458f1c70701331fcf1",
      "old_mode": 33188,
      "old_path": "services/core/java/com/android/server/uri/NeededUriGrants.java",
      "new_id": "cb6623aa2f63e2b990db5ecd8d80332c1e4f0c0e",
      "new_mode": 33188,
      "new_path": "services/core/java/com/android/server/uri/NeededUriGrants.java"
    },
    {
      "type": "modify",
      "old_id": "cc4525683838750c6e901c21b1fe138be571aa9e",
      "old_mode": 33188,
      "old_path": "services/core/java/com/android/server/wm/ActivityStartController.java",
      "new_id": "a5453c2ce8ff12119d784b3b0902e8a3f8455d7f",
      "new_mode": 33188,
      "new_path": "services/core/java/com/android/server/wm/ActivityStartController.java"
    },
    {
      "type": "modify",
      "old_id": "af471fa024dd21597930f74c8b0081e8b73a8f0f",
      "old_mode": 33188,
      "old_path": "services/core/java/com/android/server/wm/ActivityStarter.java",
      "new_id": "6787f988c3cc710f340904be917d3051ec7778e5",
      "new_mode": 33188,
      "new_path": "services/core/java/com/android/server/wm/ActivityStarter.java"
    }
  ]
}
