commit 37b58a420ff59254cbe9420c64685fdb7ea4e375
author Carlos Valdivia <carlosvaldivia@google.com> Sun Sep 07 17:45:58 2014 -0700
committer Jon Larimer <jlarimer@google.com> Wed Sep 10 21:13:10 2014 +0000
tree 1d4e3345d8c0087a74e862177bb4c38e2ab647d0
parent 90630f6a6d19e169befb8ad8117d53200eb562c4

SECURITY: Don't pass a usable Pending Intent to 3rd parties.

Unfortunately the Settings app has super powers. We shouldn't let
untrusted 3rd party authenticators re-purpose those powers to their own
nefarious ends.  This means that we shouldn't pass along PendingIntents
that can have addressing information (component, action, category)
filled in by third parties.

Bug: 17356824
Change-Id: I397d26c5f465ddfb0e58bbc66cd44756e58cc507
(cherry picked from commit f5d3e74ecc2b973941d8adbe40c6b23094b5abb7)