)]}'
{
  "commit": "37b58a420ff59254cbe9420c64685fdb7ea4e375",
  "tree": "1d4e3345d8c0087a74e862177bb4c38e2ab647d0",
  "parents": [
    "90630f6a6d19e169befb8ad8117d53200eb562c4"
  ],
  "author": {
    "name": "Carlos Valdivia",
    "email": "carlosvaldivia@google.com",
    "time": "Sun Sep 07 17:45:58 2014 -0700"
  },
  "committer": {
    "name": "Jon Larimer",
    "email": "jlarimer@google.com",
    "time": "Wed Sep 10 21:13:10 2014 +0000"
  },
  "message": "SECURITY: Don\u0027t pass a usable Pending Intent to 3rd parties.\n\nUnfortunately the Settings app has super powers. We shouldn\u0027t let\nuntrusted 3rd party authenticators re-purpose those powers to their own\nnefarious ends.  This means that we shouldn\u0027t pass along PendingIntents\nthat can have addressing information (component, action, category)\nfilled in by third parties.\n\nBug: 17356824\nChange-Id: I397d26c5f465ddfb0e58bbc66cd44756e58cc507\n(cherry picked from commit f5d3e74ecc2b973941d8adbe40c6b23094b5abb7)\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "39906eb304361ae475f745cb6fdcd36a3d75fb57",
      "old_mode": 33188,
      "old_path": "src/com/android/settings/accounts/AddAccountSettings.java",
      "new_id": "add3f866705d78233eded9d71d05f967bf1bc5ca",
      "new_mode": 33188,
      "new_path": "src/com/android/settings/accounts/AddAccountSettings.java"
    }
  ]
}