Android security 10.0.0 release 62
KeyChain: Do not allow hiding Cert Install dialog
Do not allow apps to float a window on top of the certificate
installation / naming dialog.
This obscures the CA certificate installation dialog and could be used
to trick a user into installing a CA certificate.
This is fixed by adding the HIDE_NON_SYSTEM_OVERLAY_WINDOWS system
flag when the activity is created (onCreate), so that another activity
starting in the foreground would not be able to obscure the dialog.
Test: Manual, with an app that floats a window.
(cherry picked from commit afdacb2ec4c5cdc2fb2a9943fa5b48100f4725c8)
2 files changed