)]}'
{
  "commit": "d88b5baa7b5a5b2bbe8636a835949110bdd34e30",
  "tree": "d867dac25fb9b7d62e6dffdf8d9b1e1cb7c35e87",
  "parents": [
    "4399aeddfeafeaed5e00307813277538b80d20a8"
  ],
  "author": {
    "name": "Bernardo Rufino",
    "email": "brufino@google.com",
    "time": "Wed May 26 16:25:39 2021 +0100"
  },
  "committer": {
    "name": "Android Build Coastguard Worker",
    "email": "android-build-coastguard-worker@google.com",
    "time": "Mon Aug 16 04:14:51 2021 +0000"
  },
  "message": "Fix background bypass via notifications\n\nThis is a CP of ag/14736230 to qt-dev.\n\nApps were able to bypass BAL and BG-FGS restrictions by retrieving their\nown notifications and firing their PI since those were allowlisted for\nthose operations.\n\nNow we strip the token that granted them that ability\nfrom notifications returned via NM.getActiveNotifications(), which\nreturns the notifications of the caller.\n\nNotifications returned via notification listener APIs still contain such\ntoken, as they should.\n\nBug: 185388103\nBug: 169821287\nTest: Manually tested\nChange-Id: I2ede0d639a560f6acacec3864a0a7d23af152ba5\nMerged-In: I2ede0d639a560f6acacec3864a0a7d23af152ba5\n(cherry picked from commit 5fbeff59df3ea1441c3843aa1834616876ef1985)\n(cherry picked from commit 14c1c7b4a732c517ba18f5dd0598adb9f3b72221)\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "c273cf08d03b5773754d8ecfb78ed1d67bb7dbc0",
      "old_mode": 33188,
      "old_path": "core/java/android/app/Notification.java",
      "new_id": "132afabe82d15cb5607f00a4601639a77232c28c",
      "new_mode": 33188,
      "new_path": "core/java/android/app/Notification.java"
    },
    {
      "type": "modify",
      "old_id": "dc551e14b97011af05c46b64a0d63195b10636e1",
      "old_mode": 33261,
      "old_path": "services/core/java/com/android/server/notification/NotificationManagerService.java",
      "new_id": "629a918584fed8bb37f2742ea93fe3c3f43929d0",
      "new_mode": 33261,
      "new_path": "services/core/java/com/android/server/notification/NotificationManagerService.java"
    }
  ]
}