)]}'
{
  "commit": "f44519d86b51b3508f6fbfe93f5ee4baddd11069",
  "tree": "3fa98d2b86629b08d0f317941f2982259503b19d",
  "parents": [
    "9ba93bf644c56a825a263cfd15f2161c17c6935b"
  ],
  "author": {
    "name": "Bhavuk Garg",
    "email": "bhavukgarg@google.com",
    "time": "Tue Mar 31 12:00:00 2026 +0000"
  },
  "committer": {
    "name": "Android Build Coastguard Worker",
    "email": "android-build-coastguard-worker@google.com",
    "time": "Thu Jul 09 19:04:56 2026 -0700"
  },
  "message": "Disable System Overlays to prevent tapjack attack\n\nContactsPickerActivity is not hiding overlay windows, allowing a malicious app with\nSYSTEM_ALERT_WINDOW permission to hide privacy banner or show a custom message on top of\nContactsPicker page misleading user into giving access of contacts without full disclosure.\nThis change restricts overlay windows from being drawn on top of Contacts Picker to prevent\nsuch attacks\n\nRecording - http://b/488233632#attachment75003473\n\nBug: 488233632\nFlag: EXEMPT CVE_FIX\nTest: atest ContactsPickerIntegrationTests ContactsPickerComponentTests\n(cherry picked from commit 9c389023fc9bd5bb84ad44a027e2737d81340cd0)\nCherrypick-From: https://googleplex-android-review.googlesource.com/q/commit:aeb9081e881068a4cd584b81838efc36aa931c9b\nMerged-In: Ia1a9d7f3ec3e924363c1617f5051f3fca7ded5a3\nChange-Id: Ia1a9d7f3ec3e924363c1617f5051f3fca7ded5a3\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "1696e0a95364fc0b76736d10b5f310e4c6afa5b2",
      "old_mode": 33188,
      "old_path": "AndroidManifest.xml",
      "new_id": "b87398c39e8e282bc13de02f073ff3e7dcc8d7c4",
      "new_mode": 33188,
      "new_path": "AndroidManifest.xml"
    },
    {
      "type": "modify",
      "old_id": "b72467de7257af78775a2cbe764ff75aae3268eb",
      "old_mode": 33188,
      "old_path": "src/com/android/contactspicker/ContactsPickerActivity.kt",
      "new_id": "d9118cc5f1faa75f8d8c09fac47e81f08b1f1e9e",
      "new_mode": 33188,
      "new_path": "src/com/android/contactspicker/ContactsPickerActivity.kt"
    },
    {
      "type": "modify",
      "old_id": "f5fafb113f83678986cc9be0100ea6de28410be3",
      "old_mode": 33188,
      "old_path": "tests/componenttests/src/com/android/contactspicker/ContactsPickerActivityTest.kt",
      "new_id": "f3fef87b3a1095363cabc2ec83265a342a798de7",
      "new_mode": 33188,
      "new_path": "tests/componenttests/src/com/android/contactspicker/ContactsPickerActivityTest.kt"
    }
  ]
}