Google Git
Sign in
android / platform / packages / apps / ManagedProvisioning / 69a363847696f6f79f81038cad03c7950bc82054
commit69a363847696f6f79f81038cad03c7950bc82054[log] [tgz]
authorAlex Johnston <acjohnston@google.com>Wed Feb 05 09:27:38 2025 +0000
committerAndroid Build Coastguard Worker <android-build-coastguard-worker@google.com>Wed Apr 09 15:18:43 2025 -0700
tree287a06280a79b618e56d373f52af629b2887fd72
parente7a0d5c7975b5435c9365a02db510a87e59efc2b [diff]
Remove invalid URLs in terms activity

Only HTTP and HTTPS URLs are allowed
This is required to fix a security vulnebility
where an app can be installed via a link embedded
in the TermsActivity

Bug: 368319929
Test: Manual using test app provided by the reporter
Flag: EXEMPT bug fix
(cherry picked from commit 0eb898e8737fe208d48812cfa45bad243deea55e)
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:0efb1bfa3976bb859fbeef721ca715030551a074)
Merged-In: I58a5f31812ec5e1ae5675f959201d4237c888ee3
Change-Id: I58a5f31812ec5e1ae5675f959201d4237c888ee3
1 file changed
tree: 287a06280a79b618e56d373f52af629b2887fd72
  1. proto/
  2. res/
  3. src/
  4. tests/
  5. tools/
  6. Android.bp
  7. AndroidManifest.xml
  8. OWNERS
  9. PREUPLOAD.cfg
  10. proguard.flags
  11. README.md
  12. TEST_MAPPING
README.md

Managed Provisioning

Bundled app responsible for provisioning an enterprise device

Flows

QR

{
  "android.app.extra.PROVISIONING_DEVICE_ADMIN_COMPONENT_NAME": "com.afwsamples.testdpc/com.afwsamples.testdpc.DeviceAdminReceiver",
  "android.app.extra.PROVISIONING_DEVICE_ADMIN_PACKAGE_DOWNLOAD_LOCATION": "https://testdpc-latest-apk.appspot.com/preview",
  "android.app.extra.PROVISIONING_DEVICE_ADMIN_SIGNATURE_CHECKSUM": "gJD2YwtOiWJHkSMkkIfLRlj-quNqG1fb6v100QmzM9w="
}

Code