tag d50c20ea6d2a1ed2348a739ead65bec7ab110ce3
tagger The Android Open Source Project <initial-contribution@android.com> Mon Apr 03 16:30:57 2017 -0700
object b4810a3c2074107c55c808daec44930b2a8af76e

Android 7.0.0 Release 33 (NBD92G)

commit b4810a3c2074107c55c808daec44930b2a8af76e
author Sunny Goyal <sunnygoyal@google.com> Thu Sep 08 14:32:06 2016 -0700
committer gitbuildkicker <android-build@google.com> Tue Sep 27 14:53:16 2016 -0700
tree 0e6316f1fdc0a918cd1007db04bffcc40ca12ce1
parent 269e8058d1a29a835a93ba33093542a36bdba029

Preventing a shortcut which requires permissions from being added to
homescreen

A shortcut can be added by any app as INSTALL_SHORTCUT is a normal
level permission. But the intent is actually launched by the launcher
app which can have other permission as well.

> When adding a shortcut from the broadcast, verify that the intent does
not require any permission
> When adding a shortcut using the two-step drop process, verify that
the source app also has the permission to create such a shortcut

Bug: 30778130
Change-Id: I33a391bc0af81248aaff4459aaa79d1adc77926b
(cherry picked from commit fb5096d07bb3bb59fd4b5db6b68613030169b4bd)
(cherry picked from commit 116d34bc634cfe12ffa2f291df286629d5abdcfd)