diff options
| author | Michael Groover <mpgroover@google.com> | 2021-02-26 18:27:16 -0800 |
|---|---|---|
| committer | Michael Groover <mpgroover@google.com> | 2021-02-26 18:27:16 -0800 |
| commit | 96a995dce0fc22b03aa882c76df0d5b03f026c09 (patch) | |
| tree | 9e71510e2ee10c74defc9fac733798489cca8924 /tools/aapt2/java/JavaClassGenerator.cpp | |
| parent | 85bde7b023342127bdd85a8eadcb7df0d83221c4 (diff) | |
Report UnsafeIntentLaunchViolation for unfiltered extras copy
Android 12 introduced a new StrictMode check to report an unsafe Intent
launch; initially this was intended to warn developers when a launched
Intent could potentially have originated from an external source. This
commit updates this check to also report when an Intent is being
launched with potentially unfiltered data; that is data that was
copied without sanitation / validation from a parceled Intent or
Bundle. When a violation is reported for unfiltered data the developer
should replace the #putExtras call with individual calls to #putExtra
to only include the items expected in the extras.
Bug: 181374760
Test: atest StrictModeTest
Change-Id: Id2b6baf439716367f4709d03832ceb601f9f009e
Diffstat (limited to 'tools/aapt2/java/JavaClassGenerator.cpp')
0 files changed, 0 insertions, 0 deletions