| commit | eb90469587d908ac89121baf4f4dca3d1da5b817 | [log] [tgz] |
|---|---|---|
| author | Nan Wu <wnan@google.com> | Thu Jun 22 14:27:51 2023 +0000 |
| committer | Nan Wu <wnan@google.com> | Thu Jun 29 13:24:26 2023 +0000 |
| tree | 80289074da694259efb554567f2cd0553b64b320 | |
| parent | 334d43412236fdbf44271a0b5f032881d758ec01 [diff] |
Rescind BAL privilege when ShortcutService sends the callback PI
When AppWidgetManager.requestPinAppWidget is called from a client,
The passed in callback PendingIntent is called from the system
server. This allows the PendingIntent to be able to bypass BAL
checks.
Bug: 278722815
Test: manual test. BackgroundActivityLaunchTest. Regression like
RequestPinAppWidgetTest, PeopleSpaceWidgetManagerTest, etc.
Change-Id: I2df9de272192c9a149a9ff519c96e6e0e8304040