)]}'
{
  "commit": "dba6ec2c05ff525ec280efc20cec497963c38162",
  "tree": "c1ff3d1f57fc28b4c970f0d0bb808861d1410b99",
  "parents": [
    "353a1fa497d3bb44984484fa1a490a7a634f551e"
  ],
  "author": {
    "name": "Yash Nagayach",
    "email": "yashnagayach@google.com",
    "time": "Thu Apr 30 07:58:41 2026 -0700"
  },
  "committer": {
    "name": "Android Build Coastguard Worker",
    "email": "android-build-coastguard-worker@google.com",
    "time": "Thu Jul 09 18:23:25 2026 -0700"
  },
  "message": "Validate caller in SlicePermissionActivity to prevent spoofing.\n\nAdds a check in SlicePermissionActivity\u0027s onCreate to verify the true caller. The activity will only proceed if launched by the SliceProvider\u0027s package, SystemUI, or the \"android\" system. This prevents Confused Deputy attacks where a malicious app could trick the user into granting slice permissions by spoofing the package name in the intent. New unit tests are added in SlicePermissionActivityTest to cover valid and invalid caller scenarios.\n\nBug: 486385459\nFlag: EXEMPT BUGFIX\n(cherry picked from commit 7f44449562bc0a09e52ec84b37d95733c823e72d)\nCherrypick-From: https://googleplex-android-review.googlesource.com/q/commit:390eefdff00b5ec4ecd669dfcd975b82f772e6df\nMerged-In: I49822e9f7eb2d29278d1266ae2fd51fc154744db\nChange-Id: I49822e9f7eb2d29278d1266ae2fd51fc154744db\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "67012cb0584fffdc202cfbc29ae0d8cc83e75827",
      "old_mode": 33188,
      "old_path": "packages/SystemUI/src/com/android/systemui/SlicePermissionActivity.java",
      "new_id": "5a26c8474cc3a1098633902c30f64fa786226ed6",
      "new_mode": 33188,
      "new_path": "packages/SystemUI/src/com/android/systemui/SlicePermissionActivity.java"
    },
    {
      "type": "add",
      "old_id": "0000000000000000000000000000000000000000",
      "old_mode": 0,
      "old_path": "/dev/null",
      "new_id": "cdf46cc6ebff4d93a64d8087fb7dd117e877afb0",
      "new_mode": 33188,
      "new_path": "packages/SystemUI/tests/src/com/android/systemui/SlicePermissionActivityTest.kt"
    }
  ]
}