diff options
| author | lumark <lumark@google.com> | 2019-09-29 11:30:37 +0800 |
|---|---|---|
| committer | lumark <lumark@google.com> | 2019-12-05 17:07:43 +0800 |
| commit | d0b5c8ff80e648506e0c22d9cd4e237b34a21197 (patch) | |
| tree | 943871a4d8f3f0fc640a9f54b5bd45c4493b0c0c /tools/aapt2/java/JavaClassGenerator.cpp | |
| parent | 14a2a901bdf28cb5b0e68aab9f1997a6586a7fe6 (diff) | |
Do not allow input connections from untrusted virtual displays
As Input-routing or Input Method Editor (IME) supported on multi-displays from Q,
user can interact multi-displays with touch and key input.
It could be necessary to consider and prevent a use case that the malicious app
may create in-visible virtual display to steal the window focus or intercept key
or keyboard input through input channel or input connection.
Don't provide display focus to the newly created virtual displays, until the user
interacts with a virtual display, then we give it & receive the display focus.
Bug: 129963294
Test: make sure all MultiDisplay and Window focus related tests pass.
Change-Id: I9bc37695cf6e2e894bf545a69c6cb006666c5539
Diffstat (limited to 'tools/aapt2/java/JavaClassGenerator.cpp')
0 files changed, 0 insertions, 0 deletions