tree 9b30021573e5d61c5e47d488987cff3f8bbed374
parent 40659fabbd69dd0b757c7cfac09f443f63aea280
author Ioana Alexandru <aioana@google.com> 1683906069 +0000
committer Android Build Coastguard Worker <android-build-coastguard-worker@google.com> 1686703033 +0000

Implement visitUris for RemoteViews ViewGroupActionAdd.

This is to prevent a vulnerability where notifications can show
resources belonging to other users, since the URI in the nested views
was not being checked.

Bug: 277740082
Test: atest RemoteViewsTest NotificationVisitUrisTest
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:850fd984e5f346645b5a941ed7307387c7e4c4de)
Merged-In: I5c71f0bad0a6f6361eb5ceffe8d1e47e936d78f8
Change-Id: I5c71f0bad0a6f6361eb5ceffe8d1e47e936d78f8