summaryrefslogtreecommitdiff
path: root/rs/java/android/renderscript/ProgramFragmentFixedFunction.java
diff options
context:
space:
mode:
authorBernardo Rufino <brufino@google.com>2019-10-22 11:53:42 +0100
committerSterling Huber <hubers@google.com>2019-12-05 16:40:51 +0000
commitb81f269ae2afb446b9d4a909fc2bcf038af00c41 (patch)
treeb5ad9fb06ac5ff34debfa98a21b273c3a1b60eb9 /rs/java/android/renderscript/ProgramFragmentFixedFunction.java
parent76e1059b1a685b1f8ce17fd501683f37ab222f2d (diff)
RESTRICT AUTOMERGE
Make toasts non-clickable Since enforcement was only on client-side, in Toast class, an app could use reflection (or other means) to make the Toast clickable. This is a security vulnerability since it allows tapjacking, that is, intercept touch events and do stuff like steal PINs and passwords. This CL brings the enforcement to the system by applying flag FLAG_NOT_TOUCHABLE. Test: atest CtsWindowManagerDeviceTestCases:ToastTest Test: Construct app that uses reflection to remove flag FLAG_NOT_TOUCHABLE and log click events. Then: 1) Observe click events are logged without this CL. 2) Observer click events are not logged with this CL. Bug: 128674520 Change-Id: Ic36585bc4f186e0224f5b687c49c0b3d9266838c
Diffstat (limited to 'rs/java/android/renderscript/ProgramFragmentFixedFunction.java')
0 files changed, 0 insertions, 0 deletions