1. a632114 DO NOT MERGE: "Hide" /Android/data|obb|sanbox/ on shared storage by Sergey Nikolaienkov · 2 years, 9 months ago
  2. f154795 Merge cherrypicks of ['googleplex-android-review.googlesource.com/24664788', 'googleplex-android-review.googlesource.com/24865582', 'googleplex-android-review.googlesource.com/24665127', 'googleplex-android-review.googlesource.com/25175743', 'googleplex-android-review.googlesource.com/25238611', 'googleplex-android-review.googlesource.com/25124582', 'googleplex-android-review.googlesource.com/25301258'] into security-aosp-sc-v2-release. by Android Build Coastguard Worker · 2 years, 10 months ago
  3. daa5e29 DO NOT MERGE Ensure finish lockscreen when usersetup incomplete by Aaron Liu · 2 years, 10 months ago
  4. af57409 DO NOT MERGE: Fix ActivityManager#killBackgroundProcesses permissions by Jing Ji · 2 years, 10 months ago
  5. 3222187 Fix vulnerability that allowed attackers to start arbitary activities by Will Leshner · 2 years, 10 months ago
  6. eb4aa87 RESTRICT AUTOMERGE by Nan Wu · 2 years, 10 months ago
  7. a41773a [SB][Privacy] Fetch current active appops on startup. by Caitlin Shkuratov · 2 years, 10 months ago
  8. a08795b [CDM] Validate component name length before requesting notification access. by Raphael Kim · 2 years, 10 months ago
  9. 049d942 Truncate user data to a limit of 500 characters by Tetiana Meronyk · 2 years, 10 months ago
  10. 0ada33a Merge cherrypicks of ['googleplex-android-review.googlesource.com/23905843', 'googleplex-android-review.googlesource.com/23918399', 'googleplex-android-review.googlesource.com/24420396', 'googleplex-android-review.googlesource.com/20065164', 'googleplex-android-review.googlesource.com/24575248', 'googleplex-android-review.googlesource.com/24046929', 'googleplex-android-review.googlesource.com/24342147', 'googleplex-android-review.googlesource.com/23623415', 'googleplex-android-review.googlesource.com/24605806', 'googleplex-android-review.googlesource.com/24182288', 'googleplex-android-review.googlesource.com/24757286', 'googleplex-android-review.googlesource.com/24058898', 'googleplex-android-review.googlesource.com/24805388', 'googleplex-android-review.googlesource.com/22465294', 'googleplex-android-review.googlesource.com/24559329'] into security-aosp-sc-v2-release. by Android Build Coastguard Worker · 2 years, 11 months ago
  11. 443e172 RESTRICT AUTOMERGE: Check URI permissions for resumable media artwork by Beth Thibodeau · 2 years, 11 months ago
  12. 3269136 Move startWatchingModeWithFlags to the native supported binder calls by Evan Severson · 2 years, 11 months ago
  13. d1c5a11 Updated: always show the keyguard on device lockdown by Beverly Tai · 2 years, 11 months ago
  14. 52ba8f1 Adding in verification of calling UID in onShellCommand by Kunal Malhotra · 2 years, 11 months ago
  15. 57cd7d2 Revert "On device lockdown, always show the keyguard" by Beverly Tai · 2 years, 11 months ago
  16. 1cf1b7d Validate userId when publishing shortcuts by Pinyao Ting · 2 years, 11 months ago
  17. 825a59b Use readUniqueFileDescriptor in incidentd service by Pawan Wagh · 2 years, 11 months ago
  18. f155cd0 Restrict number of shortcuts can be added through addDynamicShortcuts by Pinyao Ting · 2 years, 11 months ago
  19. 5c1ac2c Require permission to unlock keyguard by Marzia Favaro · 2 years, 11 months ago
  20. f8c2411 Validate URI-based shortcut icon at creation time. by Pinyao Ting · 2 years, 11 months ago
  21. 8638149 Disable priority conversation widget for secondary users by Julia Reynolds · 2 years, 11 months ago
  22. bdf1a29 RESTRICT AUTOMERGE: Drop invalid data. by Kweku Adams · 2 years, 11 months ago
  23. 58bca18 Visit Uris related to Notification style extras by Matías Hernández · 2 years, 11 months ago
  24. d030cfd Fix bypass BAL via `requestGeofence` by Lifu Tang · 2 years, 11 months ago
  25. 7707d6a Visit Uris added by WearableExtender by Matías Hernández · 2 years, 11 months ago
  26. edaabde Merge cherrypicks of ['googleplex-android-review.googlesource.com/23983543', 'googleplex-android-review.googlesource.com/24323876', 'googleplex-android-review.googlesource.com/24309522', 'googleplex-android-review.googlesource.com/24424817'] into security-aosp-sc-v2-release. by Android Build Coastguard Worker · 3 years ago
  27. da9dd00 [SettingsProvider] verify ringtone URI before setting by Songchun Fan · 3 years ago
  28. c050339 Use type safe API of readParcelableArray by kumarashishg · 3 years ago
  29. 9f92874 [DO NOT MERGE] Check caller's uid in backupAgentCreated callback by Piyush Mehrotra · 3 years ago
  30. 0028157 DO NOT MERGE Fix BAL via notification.publicVersion by Nan Wu · 3 years ago
  31. 0c19182 Merge cherrypicks of ['googleplex-android-review.googlesource.com/24405147'] into security-aosp-sc-v2-release. by Android Build Coastguard Worker · 3 years ago
  32. 8ba7638 Revert "Dismiss keyguard when simpin auth'd and..." by Aaron Liu · 3 years ago
  33. 970e8cc Merge cherrypicks of ['googleplex-android-review.googlesource.com/21027271', 'googleplex-android-review.googlesource.com/23497629', 'googleplex-android-review.googlesource.com/23769813', 'googleplex-android-review.googlesource.com/23877020', 'googleplex-android-review.googlesource.com/23785419', 'googleplex-android-review.googlesource.com/23847203', 'googleplex-android-review.googlesource.com/23835332', 'googleplex-android-review.googlesource.com/23423703', 'googleplex-android-review.googlesource.com/24057913', 'googleplex-android-review.googlesource.com/23981526', 'googleplex-android-review.googlesource.com/24300600', 'googleplex-android-review.googlesource.com/24273139'] into security-aosp-sc-v2-release. by Android Build Coastguard Worker · 3 years ago
  34. 18c3b19 [RESTRICT AUTOMERGE] Ignore small source rect hint by Hongwei Wang · 3 years ago
  35. ab61895 RESTRICT AUTOMERGE: SettingsProvider: exclude secure_frp_mode from resets by Eric Biggers · 3 years ago
  36. 7867452 Add userId check before loading icon in Device Controls by Anton Potapov · 3 years ago
  37. e44c450 Fixing DatabaseUtils to detect malformed UTF-16 strings by Kunal Malhotra · 3 years ago
  38. 697c280 Disallow loading icon from content URI to PipMenu by Hongwei Wang · 3 years ago
  39. 5db9214 [DO NOT MERGE] Verify URI Permissions in Autofill RemoteViews by Tim Yu · 3 years, 1 month ago
  40. 60fa3b7 Do not share key mappings with JNI object by Josep del Rio · 3 years, 1 month ago
  41. 270027c Verify URI permissions for EXTRA_REMOTE_INPUT_HISTORY_ITEMS. by Ioana Alexandru · 3 years, 1 month ago
  42. 023fdcf Import translations. DO NOT MERGE ANYWHERE by Bill Yi · 3 years, 1 month ago
  43. c9ed6f6 Add placeholder when media control title is blank by Beth Thibodeau · 3 years, 1 month ago
  44. bcc4a16 RingtoneManager: verify default ringtone is audio by Jean-Michel Trivi · 3 years, 1 month ago
  45. ae9dc18 Merge cherrypicks of ['googleplex-android-review.googlesource.com/20334962', 'googleplex-android-review.googlesource.com/23516859', 'googleplex-android-review.googlesource.com/23475534', 'googleplex-android-review.googlesource.com/23709052', 'googleplex-android-review.googlesource.com/23905843', 'googleplex-android-review.googlesource.com/23883016', 'googleplex-android-review.googlesource.com/23860830'] into security-aosp-sc-v2-release. by Android Build Coastguard Worker · 3 years, 1 month ago
  46. 1ebce10 Improve user handling when querying for resumable media by Beth Thibodeau · 3 years, 1 month ago
  47. 8c2662e Update AccountManagerService checkKeyIntentParceledCorrectly. by Dmitry Dementyev · 3 years, 1 month ago
  48. f5f9745 Forbid granting access to NLSes with too-long component names by Matías Hernández · 3 years, 2 months ago
  49. 0c34be2 Ignore virtual presentation windows - RESTRICT AUTOMERGE by Achim Thesmann · 3 years, 2 months ago
  50. ff0d658 [DO NOT MERGE] Update quickshare intent rather than recreating by Miranda Kephart · 3 years, 2 months ago
  51. 73ad2a1 DO NOT MERGE Grant carrier privileges if package has carrier config access. by Aishwarya Mallampati · 3 years, 2 months ago
  52. 72cb635 Merge cherrypicks of ['googleplex-android-review.googlesource.com/23892525'] into security-aosp-sc-v2-release. by Android Build Coastguard Worker · 3 years, 2 months ago
  53. 4b6b632 DO NOT MERGE Revert "Verify URI permissions for EXTRA_REMOTE_INPUT_HISTORY_ITEMS." by Ioana Alexandru · 3 years, 2 months ago
  54. afc9a91 Merge cherrypicks of ['googleplex-android-review.googlesource.com/20322502', 'googleplex-android-review.googlesource.com/22915959', 'googleplex-android-review.googlesource.com/22599577', 'googleplex-android-review.googlesource.com/23083140', 'googleplex-android-review.googlesource.com/23090199', 'googleplex-android-review.googlesource.com/23033896', 'googleplex-android-review.googlesource.com/23331796', 'googleplex-android-review.googlesource.com/23410117', 'googleplex-android-review.googlesource.com/23210299', 'googleplex-android-review.googlesource.com/23352460', 'googleplex-android-review.googlesource.com/23207574', 'googleplex-android-review.googlesource.com/23429137', 'googleplex-android-review.googlesource.com/23386456', 'googleplex-android-review.googlesource.com/23430378', 'googleplex-android-review.googlesource.com/23465066', 'googleplex-android-review.googlesource.com/23475286', 'googleplex-android-review.googlesource.com/23439343'] into security-aosp-sc-v2-release. by Android Build Coastguard Worker · 3 years, 3 months ago
  55. bff6911 Remove unnecessary padding code by Lee Shombert · 3 years, 3 months ago
  56. ae9945c Use Settings.System.getIntForUser instead of getInt to make sure user specific settings are used by Chandru S · 3 years, 3 months ago
  57. 36721f2 Resolve StatusHints image exploit across user. by Pranav Madapurmath · 3 years, 3 months ago
  58. c84b7d2 Visit URIs in themed remoteviews icons. by Ioana Alexandru · 3 years, 3 months ago
  59. 5692516 Fix PrivacyChip not visible issue by Johannes Gallmann · 3 years, 3 months ago
  60. 01124af Check URIs in sized remote views. by Ioana Alexandru · 3 years, 3 months ago
  61. dee2483 Verify URI permissions in MediaMetadata by Michael Mikhail · 3 years, 3 months ago
  62. 9e8255c Validate ComponentName for MediaButtonBroadcastReceiver by Iván Budnik · 3 years, 3 months ago
  63. 4111de7 Implement visitUris for RemoteViews ViewGroupActionAdd. by Ioana Alexandru · 3 years, 3 months ago
  64. 4f68823 Check URIs in notification public version. by Ioana Alexandru · 3 years, 3 months ago
  65. 5f15749 Preserve flags for non-runtime permissions upon package update. by Hai Zhang · 3 years, 3 months ago
  66. 5e04f47 Ensure policy has no absurdly long strings by Pavel Grafov · 3 years, 3 months ago
  67. 55dd328 On device lockdown, always show the keyguard by Beverly · 3 years, 3 months ago
  68. 8ac4a9a Verify URI permissions for notification shortcutIcon. by Ioana Alexandru · 3 years, 3 months ago
  69. 6c18f90 Do not load drawable for wallet card if the card image icon iscreated by Silin Huang · 3 years, 3 months ago
  70. 2087ec3 ActivityManagerService: Allow openContentUri from vendor/system/product. by Austin Borger · 3 years, 3 months ago
  71. 7d3814d DO NOT MERGE: ActivityManager#killBackgroundProcesses can kill caller's own app only by Jing Ji · 3 years, 3 months ago
  72. 9e6be77 Merge cherrypicks of ['googleplex-android-review.googlesource.com/20219552', 'googleplex-android-review.googlesource.com/20946190', 'googleplex-android-review.googlesource.com/20460002', 'googleplex-android-review.googlesource.com/22390145', 'googleplex-android-review.googlesource.com/22616881', 'googleplex-android-review.googlesource.com/21327525', 'googleplex-android-review.googlesource.com/22621774', 'googleplex-android-review.googlesource.com/22787457', 'googleplex-android-review.googlesource.com/22907463', 'googleplex-android-review.googlesource.com/22895638'] into security-aosp-sc-v2-release. by Android Build Coastguard Worker · 3 years, 4 months ago
  73. a14d926 Visit URIs in landscape/portrait custom remote views. by Ioana Alexandru · 3 years, 4 months ago
  74. f38c2a0 Truncate ShortcutInfo Id by András Kurucz · 3 years, 4 months ago
  75. 685bca1 Verify URI permissions for EXTRA_REMOTE_INPUT_HISTORY_ITEMS. by Ioana Alexandru · 3 years, 4 months ago
  76. 09aa5ec Dismiss keyguard when simpin auth'd and... by Aaron Liu · 3 years, 4 months ago
  77. dfe08ce Only allow NEW_TASK flag when adjusting pending intents by Winson Chung · 3 years, 4 months ago
  78. 821dd6f Grant URI permissions to the CallStyle-related ones by Matías Hernández · 3 years, 4 months ago
  79. 7cbbce5 Limit the number of supported v1 and v2 signers by Michael Groover · 3 years, 4 months ago
  80. de1c16b Sanitize VPN label to prevent HTML injection by Lucas Lin · 3 years, 4 months ago
  81. c6b4947 Revert "Ensure that only SysUI can override pending intent launch flags" by Winson Chung · 3 years, 4 months ago
  82. 71afc6a Ensure that only SysUI can override pending intent launch flags by Winson Chung · 3 years, 4 months ago
  83. 67203e5 Merge cherrypicks of ['googleplex-android-review.googlesource.com/21564420', 'googleplex-android-review.googlesource.com/21537729', 'googleplex-android-review.googlesource.com/21674619', 'googleplex-android-review.googlesource.com/22100003', 'googleplex-android-review.googlesource.com/21614465', 'googleplex-android-review.googlesource.com/22141712', 'googleplex-android-review.googlesource.com/22290982', 'googleplex-android-review.googlesource.com/20026090', 'googleplex-android-review.googlesource.com/22311042', 'googleplex-android-review.googlesource.com/22312922'] into security-aosp-sc-v2-release. by Android Build Coastguard Worker · 3 years, 5 months ago
  84. fe5bf52 [RESTRICT AUTOMERGE] Add BubbleMetadata detection to block FSI by Jeff DeCew · 3 years, 5 months ago
  85. c8b2481 Enforce DevicePolicyManager.setUserControlDisabledPackages in AppStandbyController by Alex Johnston · 3 years, 5 months ago
  86. 8e52eeb Handle invalid data during job loading. by Kweku Adams · 3 years, 5 months ago
  87. f21c0b91 Allow filtering of services by Julia Reynolds · 3 years, 5 months ago
  88. add9717 DO NOT MERGE: Grant MANAGE_USERS access to Traceur by Kevin Jeon · 3 years, 5 months ago
  89. 766fe1d Check key intent for selectors and prohibited flags by Brian Lee · 3 years, 5 months ago
  90. 4b77451 [DO NOT MERGE] Prevent RemoteViews crashing SystemUi by Valentin Iftime · 3 years, 5 months ago
  91. b65a365 [DO NOT MERGE] Wait for preloading images to complete before inflating notifications by Valentin Iftime · 3 years, 5 months ago
  92. 4c20a1d Prevent sharesheet from previewing unowned URIs by Mark Renouf · 3 years, 5 months ago
  93. f44beb7 Remove Activity if it enters PiP without window by Hongwei Wang · 3 years, 5 months ago
  94. f5decfa Merge cherrypicks of ['googleplex-android-review.googlesource.com/21160269', 'googleplex-android-review.googlesource.com/21266751', 'googleplex-android-review.googlesource.com/21238189', 'googleplex-android-review.googlesource.com/21398181', 'googleplex-android-review.googlesource.com/17695053', 'googleplex-android-review.googlesource.com/21318377', 'googleplex-android-review.googlesource.com/21740099', 'googleplex-android-review.googlesource.com/21537729', 'googleplex-android-review.googlesource.com/21574889'] into security-aosp-sc-v2-release. by Android Build Coastguard Worker · 3 years, 5 months ago
  95. bde7755 Limit the number of shortcuts per app that can be retained by system by Pinyao Ting · 3 years, 5 months ago
  96. 2e0102e Trim strings added to persistent snoozed notification storage. by Ioana Alexandru · 3 years, 6 months ago
  97. 491402d enforce stricter rules when registering phoneAccounts by Thomas Stuart · 3 years, 6 months ago
  98. 4dea696 Uri: check authority and scheme as part of determining URI path by Orion Hodson · 3 years, 6 months ago
  99. 6fb0ad7 Re-enforce MANAGE_ACTIVITY_TASKS for applySyncTransaction by Chris Li · 3 years, 6 months ago
  100. 647114a Checks if AccessibilityServiceInfo is within parcelable size. by Daniel Norman · 3 years, 6 months ago