- a632114 DO NOT MERGE: "Hide" /Android/data|obb|sanbox/ on shared storage by Sergey Nikolaienkov · 2 years, 9 months ago
- f154795 Merge cherrypicks of ['googleplex-android-review.googlesource.com/24664788', 'googleplex-android-review.googlesource.com/24865582', 'googleplex-android-review.googlesource.com/24665127', 'googleplex-android-review.googlesource.com/25175743', 'googleplex-android-review.googlesource.com/25238611', 'googleplex-android-review.googlesource.com/25124582', 'googleplex-android-review.googlesource.com/25301258'] into security-aosp-sc-v2-release. by Android Build Coastguard Worker · 2 years, 10 months ago
- daa5e29 DO NOT MERGE Ensure finish lockscreen when usersetup incomplete by Aaron Liu · 2 years, 10 months ago
- af57409 DO NOT MERGE: Fix ActivityManager#killBackgroundProcesses permissions by Jing Ji · 2 years, 10 months ago
- 3222187 Fix vulnerability that allowed attackers to start arbitary activities by Will Leshner · 2 years, 10 months ago
- eb4aa87 RESTRICT AUTOMERGE by Nan Wu · 2 years, 10 months ago
- a41773a [SB][Privacy] Fetch current active appops on startup. by Caitlin Shkuratov · 2 years, 10 months ago
- a08795b [CDM] Validate component name length before requesting notification access. by Raphael Kim · 2 years, 10 months ago
- 049d942 Truncate user data to a limit of 500 characters by Tetiana Meronyk · 2 years, 10 months ago
- 0ada33a Merge cherrypicks of ['googleplex-android-review.googlesource.com/23905843', 'googleplex-android-review.googlesource.com/23918399', 'googleplex-android-review.googlesource.com/24420396', 'googleplex-android-review.googlesource.com/20065164', 'googleplex-android-review.googlesource.com/24575248', 'googleplex-android-review.googlesource.com/24046929', 'googleplex-android-review.googlesource.com/24342147', 'googleplex-android-review.googlesource.com/23623415', 'googleplex-android-review.googlesource.com/24605806', 'googleplex-android-review.googlesource.com/24182288', 'googleplex-android-review.googlesource.com/24757286', 'googleplex-android-review.googlesource.com/24058898', 'googleplex-android-review.googlesource.com/24805388', 'googleplex-android-review.googlesource.com/22465294', 'googleplex-android-review.googlesource.com/24559329'] into security-aosp-sc-v2-release. by Android Build Coastguard Worker · 2 years, 11 months ago
- 443e172 RESTRICT AUTOMERGE: Check URI permissions for resumable media artwork by Beth Thibodeau · 2 years, 11 months ago
- 3269136 Move startWatchingModeWithFlags to the native supported binder calls by Evan Severson · 2 years, 11 months ago
- d1c5a11 Updated: always show the keyguard on device lockdown by Beverly Tai · 2 years, 11 months ago
- 52ba8f1 Adding in verification of calling UID in onShellCommand by Kunal Malhotra · 2 years, 11 months ago
- 57cd7d2 Revert "On device lockdown, always show the keyguard" by Beverly Tai · 2 years, 11 months ago
- 1cf1b7d Validate userId when publishing shortcuts by Pinyao Ting · 2 years, 11 months ago
- 825a59b Use readUniqueFileDescriptor in incidentd service by Pawan Wagh · 2 years, 11 months ago
- f155cd0 Restrict number of shortcuts can be added through addDynamicShortcuts by Pinyao Ting · 2 years, 11 months ago
- 5c1ac2c Require permission to unlock keyguard by Marzia Favaro · 2 years, 11 months ago
- f8c2411 Validate URI-based shortcut icon at creation time. by Pinyao Ting · 2 years, 11 months ago
- 8638149 Disable priority conversation widget for secondary users by Julia Reynolds · 2 years, 11 months ago
- bdf1a29 RESTRICT AUTOMERGE: Drop invalid data. by Kweku Adams · 2 years, 11 months ago
- 58bca18 Visit Uris related to Notification style extras by Matías Hernández · 2 years, 11 months ago
- d030cfd Fix bypass BAL via `requestGeofence` by Lifu Tang · 2 years, 11 months ago
- 7707d6a Visit Uris added by WearableExtender by Matías Hernández · 2 years, 11 months ago
- edaabde Merge cherrypicks of ['googleplex-android-review.googlesource.com/23983543', 'googleplex-android-review.googlesource.com/24323876', 'googleplex-android-review.googlesource.com/24309522', 'googleplex-android-review.googlesource.com/24424817'] into security-aosp-sc-v2-release. by Android Build Coastguard Worker · 3 years ago
- da9dd00 [SettingsProvider] verify ringtone URI before setting by Songchun Fan · 3 years ago
- c050339 Use type safe API of readParcelableArray by kumarashishg · 3 years ago
- 9f92874 [DO NOT MERGE] Check caller's uid in backupAgentCreated callback by Piyush Mehrotra · 3 years ago
- 0028157 DO NOT MERGE Fix BAL via notification.publicVersion by Nan Wu · 3 years ago
- 0c19182 Merge cherrypicks of ['googleplex-android-review.googlesource.com/24405147'] into security-aosp-sc-v2-release. by Android Build Coastguard Worker · 3 years ago
- 8ba7638 Revert "Dismiss keyguard when simpin auth'd and..." by Aaron Liu · 3 years ago
- 970e8cc Merge cherrypicks of ['googleplex-android-review.googlesource.com/21027271', 'googleplex-android-review.googlesource.com/23497629', 'googleplex-android-review.googlesource.com/23769813', 'googleplex-android-review.googlesource.com/23877020', 'googleplex-android-review.googlesource.com/23785419', 'googleplex-android-review.googlesource.com/23847203', 'googleplex-android-review.googlesource.com/23835332', 'googleplex-android-review.googlesource.com/23423703', 'googleplex-android-review.googlesource.com/24057913', 'googleplex-android-review.googlesource.com/23981526', 'googleplex-android-review.googlesource.com/24300600', 'googleplex-android-review.googlesource.com/24273139'] into security-aosp-sc-v2-release. by Android Build Coastguard Worker · 3 years ago
- 18c3b19 [RESTRICT AUTOMERGE] Ignore small source rect hint by Hongwei Wang · 3 years ago
- ab61895 RESTRICT AUTOMERGE: SettingsProvider: exclude secure_frp_mode from resets by Eric Biggers · 3 years ago
- 7867452 Add userId check before loading icon in Device Controls by Anton Potapov · 3 years ago
- e44c450 Fixing DatabaseUtils to detect malformed UTF-16 strings by Kunal Malhotra · 3 years ago
- 697c280 Disallow loading icon from content URI to PipMenu by Hongwei Wang · 3 years ago
- 5db9214 [DO NOT MERGE] Verify URI Permissions in Autofill RemoteViews by Tim Yu · 3 years, 1 month ago
- 60fa3b7 Do not share key mappings with JNI object by Josep del Rio · 3 years, 1 month ago
- 270027c Verify URI permissions for EXTRA_REMOTE_INPUT_HISTORY_ITEMS. by Ioana Alexandru · 3 years, 1 month ago
- 023fdcf Import translations. DO NOT MERGE ANYWHERE by Bill Yi · 3 years, 1 month ago
- c9ed6f6 Add placeholder when media control title is blank by Beth Thibodeau · 3 years, 1 month ago
- bcc4a16 RingtoneManager: verify default ringtone is audio by Jean-Michel Trivi · 3 years, 1 month ago
- ae9dc18 Merge cherrypicks of ['googleplex-android-review.googlesource.com/20334962', 'googleplex-android-review.googlesource.com/23516859', 'googleplex-android-review.googlesource.com/23475534', 'googleplex-android-review.googlesource.com/23709052', 'googleplex-android-review.googlesource.com/23905843', 'googleplex-android-review.googlesource.com/23883016', 'googleplex-android-review.googlesource.com/23860830'] into security-aosp-sc-v2-release. by Android Build Coastguard Worker · 3 years, 1 month ago
- 1ebce10 Improve user handling when querying for resumable media by Beth Thibodeau · 3 years, 1 month ago
- 8c2662e Update AccountManagerService checkKeyIntentParceledCorrectly. by Dmitry Dementyev · 3 years, 1 month ago
- f5f9745 Forbid granting access to NLSes with too-long component names by Matías Hernández · 3 years, 2 months ago
- 0c34be2 Ignore virtual presentation windows - RESTRICT AUTOMERGE by Achim Thesmann · 3 years, 2 months ago
- ff0d658 [DO NOT MERGE] Update quickshare intent rather than recreating by Miranda Kephart · 3 years, 2 months ago
- 73ad2a1 DO NOT MERGE Grant carrier privileges if package has carrier config access. by Aishwarya Mallampati · 3 years, 2 months ago
- 72cb635 Merge cherrypicks of ['googleplex-android-review.googlesource.com/23892525'] into security-aosp-sc-v2-release. by Android Build Coastguard Worker · 3 years, 2 months ago
- 4b6b632 DO NOT MERGE Revert "Verify URI permissions for EXTRA_REMOTE_INPUT_HISTORY_ITEMS." by Ioana Alexandru · 3 years, 2 months ago
- afc9a91 Merge cherrypicks of ['googleplex-android-review.googlesource.com/20322502', 'googleplex-android-review.googlesource.com/22915959', 'googleplex-android-review.googlesource.com/22599577', 'googleplex-android-review.googlesource.com/23083140', 'googleplex-android-review.googlesource.com/23090199', 'googleplex-android-review.googlesource.com/23033896', 'googleplex-android-review.googlesource.com/23331796', 'googleplex-android-review.googlesource.com/23410117', 'googleplex-android-review.googlesource.com/23210299', 'googleplex-android-review.googlesource.com/23352460', 'googleplex-android-review.googlesource.com/23207574', 'googleplex-android-review.googlesource.com/23429137', 'googleplex-android-review.googlesource.com/23386456', 'googleplex-android-review.googlesource.com/23430378', 'googleplex-android-review.googlesource.com/23465066', 'googleplex-android-review.googlesource.com/23475286', 'googleplex-android-review.googlesource.com/23439343'] into security-aosp-sc-v2-release. by Android Build Coastguard Worker · 3 years, 3 months ago
- bff6911 Remove unnecessary padding code by Lee Shombert · 3 years, 3 months ago
- ae9945c Use Settings.System.getIntForUser instead of getInt to make sure user specific settings are used by Chandru S · 3 years, 3 months ago
- 36721f2 Resolve StatusHints image exploit across user. by Pranav Madapurmath · 3 years, 3 months ago
- c84b7d2 Visit URIs in themed remoteviews icons. by Ioana Alexandru · 3 years, 3 months ago
- 5692516 Fix PrivacyChip not visible issue by Johannes Gallmann · 3 years, 3 months ago
- 01124af Check URIs in sized remote views. by Ioana Alexandru · 3 years, 3 months ago
- dee2483 Verify URI permissions in MediaMetadata by Michael Mikhail · 3 years, 3 months ago
- 9e8255c Validate ComponentName for MediaButtonBroadcastReceiver by Iván Budnik · 3 years, 3 months ago
- 4111de7 Implement visitUris for RemoteViews ViewGroupActionAdd. by Ioana Alexandru · 3 years, 3 months ago
- 4f68823 Check URIs in notification public version. by Ioana Alexandru · 3 years, 3 months ago
- 5f15749 Preserve flags for non-runtime permissions upon package update. by Hai Zhang · 3 years, 3 months ago
- 5e04f47 Ensure policy has no absurdly long strings by Pavel Grafov · 3 years, 3 months ago
- 55dd328 On device lockdown, always show the keyguard by Beverly · 3 years, 3 months ago
- 8ac4a9a Verify URI permissions for notification shortcutIcon. by Ioana Alexandru · 3 years, 3 months ago
- 6c18f90 Do not load drawable for wallet card if the card image icon iscreated by Silin Huang · 3 years, 3 months ago
- 2087ec3 ActivityManagerService: Allow openContentUri from vendor/system/product. by Austin Borger · 3 years, 3 months ago
- 7d3814d DO NOT MERGE: ActivityManager#killBackgroundProcesses can kill caller's own app only by Jing Ji · 3 years, 3 months ago
- 9e6be77 Merge cherrypicks of ['googleplex-android-review.googlesource.com/20219552', 'googleplex-android-review.googlesource.com/20946190', 'googleplex-android-review.googlesource.com/20460002', 'googleplex-android-review.googlesource.com/22390145', 'googleplex-android-review.googlesource.com/22616881', 'googleplex-android-review.googlesource.com/21327525', 'googleplex-android-review.googlesource.com/22621774', 'googleplex-android-review.googlesource.com/22787457', 'googleplex-android-review.googlesource.com/22907463', 'googleplex-android-review.googlesource.com/22895638'] into security-aosp-sc-v2-release. by Android Build Coastguard Worker · 3 years, 4 months ago
- a14d926 Visit URIs in landscape/portrait custom remote views. by Ioana Alexandru · 3 years, 4 months ago
- f38c2a0 Truncate ShortcutInfo Id by András Kurucz · 3 years, 4 months ago
- 685bca1 Verify URI permissions for EXTRA_REMOTE_INPUT_HISTORY_ITEMS. by Ioana Alexandru · 3 years, 4 months ago
- 09aa5ec Dismiss keyguard when simpin auth'd and... by Aaron Liu · 3 years, 4 months ago
- dfe08ce Only allow NEW_TASK flag when adjusting pending intents by Winson Chung · 3 years, 4 months ago
- 821dd6f Grant URI permissions to the CallStyle-related ones by Matías Hernández · 3 years, 4 months ago
- 7cbbce5 Limit the number of supported v1 and v2 signers by Michael Groover · 3 years, 4 months ago
- de1c16b Sanitize VPN label to prevent HTML injection by Lucas Lin · 3 years, 4 months ago
- c6b4947 Revert "Ensure that only SysUI can override pending intent launch flags" by Winson Chung · 3 years, 4 months ago
- 71afc6a Ensure that only SysUI can override pending intent launch flags by Winson Chung · 3 years, 4 months ago
- 67203e5 Merge cherrypicks of ['googleplex-android-review.googlesource.com/21564420', 'googleplex-android-review.googlesource.com/21537729', 'googleplex-android-review.googlesource.com/21674619', 'googleplex-android-review.googlesource.com/22100003', 'googleplex-android-review.googlesource.com/21614465', 'googleplex-android-review.googlesource.com/22141712', 'googleplex-android-review.googlesource.com/22290982', 'googleplex-android-review.googlesource.com/20026090', 'googleplex-android-review.googlesource.com/22311042', 'googleplex-android-review.googlesource.com/22312922'] into security-aosp-sc-v2-release. by Android Build Coastguard Worker · 3 years, 5 months ago
- fe5bf52 [RESTRICT AUTOMERGE] Add BubbleMetadata detection to block FSI by Jeff DeCew · 3 years, 5 months ago
- c8b2481 Enforce DevicePolicyManager.setUserControlDisabledPackages in AppStandbyController by Alex Johnston · 3 years, 5 months ago
- 8e52eeb Handle invalid data during job loading. by Kweku Adams · 3 years, 5 months ago
- f21c0b91 Allow filtering of services by Julia Reynolds · 3 years, 5 months ago
- add9717 DO NOT MERGE: Grant MANAGE_USERS access to Traceur by Kevin Jeon · 3 years, 5 months ago
- 766fe1d Check key intent for selectors and prohibited flags by Brian Lee · 3 years, 5 months ago
- 4b77451 [DO NOT MERGE] Prevent RemoteViews crashing SystemUi by Valentin Iftime · 3 years, 5 months ago
- b65a365 [DO NOT MERGE] Wait for preloading images to complete before inflating notifications by Valentin Iftime · 3 years, 5 months ago
- 4c20a1d Prevent sharesheet from previewing unowned URIs by Mark Renouf · 3 years, 5 months ago
- f44beb7 Remove Activity if it enters PiP without window by Hongwei Wang · 3 years, 5 months ago
- f5decfa Merge cherrypicks of ['googleplex-android-review.googlesource.com/21160269', 'googleplex-android-review.googlesource.com/21266751', 'googleplex-android-review.googlesource.com/21238189', 'googleplex-android-review.googlesource.com/21398181', 'googleplex-android-review.googlesource.com/17695053', 'googleplex-android-review.googlesource.com/21318377', 'googleplex-android-review.googlesource.com/21740099', 'googleplex-android-review.googlesource.com/21537729', 'googleplex-android-review.googlesource.com/21574889'] into security-aosp-sc-v2-release. by Android Build Coastguard Worker · 3 years, 5 months ago
- bde7755 Limit the number of shortcuts per app that can be retained by system by Pinyao Ting · 3 years, 5 months ago
- 2e0102e Trim strings added to persistent snoozed notification storage. by Ioana Alexandru · 3 years, 6 months ago
- 491402d enforce stricter rules when registering phoneAccounts by Thomas Stuart · 3 years, 6 months ago
- 4dea696 Uri: check authority and scheme as part of determining URI path by Orion Hodson · 3 years, 6 months ago
- 6fb0ad7 Re-enforce MANAGE_ACTIVITY_TASKS for applySyncTransaction by Chris Li · 3 years, 6 months ago
- 647114a Checks if AccessibilityServiceInfo is within parcelable size. by Daniel Norman · 3 years, 6 months ago