diff options
| author | Bernardo Rufino <brufino@google.com> | 2021-05-26 16:25:39 +0100 |
|---|---|---|
| committer | Bernardo Rufino <brufino@google.com> | 2021-05-26 16:25:39 +0100 |
| commit | 5fbeff59df3ea1441c3843aa1834616876ef1985 (patch) | |
| tree | 218104eca5d76769005e10d3cb4dce089b6ef47a /rs/java/android/renderscript/ProgramFragmentFixedFunction.java | |
| parent | 5044308999beb63b1ee9148a99e136b212e41170 (diff) | |
Fix background bypass via notifications
Apps were able to bypass BAL and BG-FGS restrictions by retrieving their
own notifications and firing their PI since those were allowlisted for
those operations.
Now we strip the token that granted them that ability
from notifications returned via NM.getActiveNotifications(), which
returns the notifications of the caller.
Notifications returned via notification listener APIs still contain such
token, as they should.
Bug: 185388103
Bug: 169821287
Test: atest -d android.app.cts.NotificationManagerTest#testActivityStartFromRetrievedNotification_isBlocked
Change-Id: I2ede0d639a560f6acacec3864a0a7d23af152ba5
Diffstat (limited to 'rs/java/android/renderscript/ProgramFragmentFixedFunction.java')
0 files changed, 0 insertions, 0 deletions