Android 8.0.0 release 48
-----BEGIN PGP SIGNATURE-----
-----END PGP SIGNATURE-----
KeyChain: Do not allow hiding Cert Install dialog
Do not allow apps to float a window on top of the certificate
installation / naming dialog.
This obscures the CA certificate installation dialog and could be used
to trick a user into installing a CA certificate.
This is fixed by adding the HIDE_NON_SYSTEM_OVERLAY_WINDOWS system
flag when the activity is created (onCreate), so that another activity
starting in the foreground would not be able to obscure the dialog.
Test: Manual, with an app that floats a window.
(cherry picked from commit 6afaf1846cc28af1ea048ebd55770cb38f77fb19)
2 files changed