)]}'
{
  "commit": "ad7af76515094a9e8141ed74ef38abef538c563a",
  "tree": "8c6787defe84076dd6e18d20a8944309a1cd702c",
  "parents": [
    "98c176bcf200f046775b88f6c24fe997a1c0a7d0"
  ],
  "author": {
    "name": "Tim Yu",
    "email": "yunicorn@google.com",
    "time": "Tue Jun 20 21:24:36 2023 +0000"
  },
  "committer": {
    "name": "Tim Yu",
    "email": "yunicorn@google.com",
    "time": "Wed Jun 28 21:00:52 2023 +0000"
  },
  "message": "[DO NOT MERGE] Verify URI Permissions in Autofill RemoteViews\n\nCheck permissions of URI inside of FillResponse\u0027s RemoteViews. If the\ncurrent user does not have the required permissions to view the URI, the\nRemoteView is dropped from displaying.\n\nThis fixes a security spill in which a user can view content of another\nuser through a malicious Autofill provider.\n\nBug: 283137865\nFixes: b/283264674 b/281666022 b/281665050 b/281848557 b/281533566\nb/281534749 b/283101289\nTest: Verified by POC app attached in bugs\nTest: atest CtsAutoFillServiceTestCases (added new tests)\nChange-Id: I6f4d2a35e89bbed7bd9e07bf5cd3e2d68b20af9a\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "82af38200166954f4ac87f6d68d49569f33c7c53",
      "old_mode": 33188,
      "old_path": "services/autofill/java/com/android/server/autofill/Helper.java",
      "new_id": "7557071d0d4b8645c4035e15724dc61a173c4695",
      "new_mode": 33188,
      "new_path": "services/autofill/java/com/android/server/autofill/Helper.java"
    },
    {
      "type": "modify",
      "old_id": "dbeb624bd202c2d684c9cd44ace1afbfd721c387",
      "old_mode": 33188,
      "old_path": "services/autofill/java/com/android/server/autofill/ui/DialogFillUi.java",
      "new_id": "fa414e3b172b330f85608e85b78a9f977b89a791",
      "new_mode": 33188,
      "new_path": "services/autofill/java/com/android/server/autofill/ui/DialogFillUi.java"
    },
    {
      "type": "modify",
      "old_id": "129ce72e037dfa6ba9bee9577729e0b9469177a2",
      "old_mode": 33188,
      "old_path": "services/autofill/java/com/android/server/autofill/ui/FillUi.java",
      "new_id": "cdfe7bb4f4a78126309f6aba600ea8ba4655d572",
      "new_mode": 33188,
      "new_path": "services/autofill/java/com/android/server/autofill/ui/FillUi.java"
    },
    {
      "type": "modify",
      "old_id": "f035d076427908284c22331c4c66d7e1c964b315",
      "old_mode": 33188,
      "old_path": "services/autofill/java/com/android/server/autofill/ui/SaveUi.java",
      "new_id": "70382f1d5274b6fd298581eff981f0b55be921a9",
      "new_mode": 33188,
      "new_path": "services/autofill/java/com/android/server/autofill/ui/SaveUi.java"
    }
  ]
}