tree 363026a044d8b141a703d69ec5e3216d2e6f13c2
parent 3e49f8045ba8489575170554f46236e5c85afde2
author Oli Lan <olilan@google.com> 1661534956 +0100
committer Keith Mok <keithmok@google.com> 1663629308 +0000

DO NOT MERGE Prevent exfiltration of system files via avatar picker.

This adds mitigations to prevent system files being exfiltrated
via the settings content provider when a content URI is provided
as a chosen user image.

The mitigations are:

1) Copy the image to a new URI rather than the existing takePictureUri
prior to cropping.

2) Only allow a system handler to respond to the CROP intent.

This is a fixed version of ag/17003629, to address b/239513606.

Bug: 187702830
Test: build and check functionality
Change-Id: I10c31be238ac7afc56701209c71353ffa31db096