diff options
| author | Felipe Leme <felipeal@google.com> | 2017-05-30 09:35:17 -0700 |
|---|---|---|
| committer | Felipe Leme <felipeal@google.com> | 2017-05-30 14:34:27 -0700 |
| commit | 8697a31d3c32f212cee48b4d0576e8783c6c9d5f (patch) | |
| tree | 5d7139e203ce85c568322b0990eefe544a2e4280 /tools/aapt2/java/JavaClassGenerator.cpp | |
| parent | d865c624bda8130bdb03238e875dec9df5491e25 (diff) | |
Don't automatically autofill when manual request returned just 1 dataset.
When the user manually requested autofill and the service returned just 1
dataset, the app was automatically filled with it.
The motivation here was that since the user explicitly asked for autofill,
it'd ok - and better for the user - to release the data to the app without
the selecting a dataset.
This assumption was ok initially, but now the API to manually request autofill
is public, so a malicious app could use to get autofill data without user
interation.
Test: CtsAutoFillServiceTestCases pass
Fixes: 62164695
Change-Id: I47c3d8c557533526572aa67a4240c0a57f54268d
Diffstat (limited to 'tools/aapt2/java/JavaClassGenerator.cpp')
0 files changed, 0 insertions, 0 deletions