Remove invalid URLs in terms activity

Only HTTP and HTTPS URLs are allowed
This is required to fix a security vulnebility
where an app can be installed via a link embedded
in the TermsActivity

Bug: 368319929
Test: Manual using test app provided by the reporter
Flag: EXEMPT bug fix
(cherry picked from commit 0eb898e8737fe208d48812cfa45bad243deea55e)
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:f6ffc1df5407791f3f23b535eb97663694bdf380)
Merged-In: I58a5f31812ec5e1ae5675f959201d4237c888ee3
Change-Id: I58a5f31812ec5e1ae5675f959201d4237c888ee3
1 file changed
tree: df118fb5a1fb7c1769c9e2b313923c42a75826b1
  1. .idea/
  2. aconfig/
  3. proto/
  4. res/
  5. src/
  6. studio-dev/
  7. tests/
  8. tools/
  9. Android.bp
  10. AndroidManifest.xml
  11. OWNERS
  12. PREUPLOAD.cfg
  13. proguard.flags
  14. README.md
  15. TEST_MAPPING
README.md

Managed Provisioning

Bundled app responsible for provisioning an enterprise device

Flows

QR

{
  "android.app.extra.PROVISIONING_DEVICE_ADMIN_COMPONENT_NAME": "com.afwsamples.testdpc/com.afwsamples.testdpc.DeviceAdminReceiver",
  "android.app.extra.PROVISIONING_DEVICE_ADMIN_PACKAGE_DOWNLOAD_LOCATION": "https://testdpc-latest-apk.appspot.com/preview",
  "android.app.extra.PROVISIONING_DEVICE_ADMIN_SIGNATURE_CHECKSUM": "gJD2YwtOiWJHkSMkkIfLRlj-quNqG1fb6v100QmzM9w="
}

Code

AS Setup

aidegen -n -i=s -p=/opt/android-studio-with-blaze-canary \
    packages/apps/ManagedProvisioning \
    frameworks/base \
    cts \
    vendor/xts \
    packages/apps/Settings \
    vendor/unbundled_google/packages/SettingsGoogle \
    external/connectedappssdk \
    packages/services/Car/packages/CarManagedProvisioning \
    vendor/google/apps/SetupWizardOverlay/PixelSetupWizard

References