diff options
| author | Seigo Nonaka <nona@google.com> | 2017-06-22 08:22:18 -0700 |
|---|---|---|
| committer | Seigo Nonaka <nona@google.com> | 2017-06-22 08:36:03 -0700 |
| commit | 6d6cd68660635d670b0cb17f348b7c1da13704b3 (patch) | |
| tree | 46ff413dabcfa566e5e7174ed24b41da1ce13ec8 /tools/aapt2/java/JavaClassGenerator_test.cpp | |
| parent | 58aeff811f2da99537a8a9531fc58cea8ffbb867 (diff) | |
Stop loading other package's font by default.
Since CONTEXT_RESTRICTED is not a default flag of createPackageContext,
we can't rely on it for preventing unexpected font injections.
To protect developers and existing apps from a risk of font injection,
stop loading font from other package's resouce unless the developer
explicitly set CONTEXT_IGNORE_SECURITY.
Bug: 62813533
Bug: 62879353
Test: Manually done
Change-Id: I4442ddc48dadb5c968b444be86038b602074d301
Diffstat (limited to 'tools/aapt2/java/JavaClassGenerator_test.cpp')
0 files changed, 0 insertions, 0 deletions