Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit aa23050a authored by Jeff Chang's avatar Jeff Chang Committed by MSe
Browse files

[RESTRICT AUTOMERGE] Add hide-non-system-overlay flag for HarmfulAppWarningActivity 

A malicious application could overlay the activity. The overlay is
able to be tapped through, which can trick the user into starting a
harmful activity.

The CL added the flag SYSTEM_FLAG_HIDE_NON_SYSTEM_OVERLAY_WINDOWS for
the activity to prevent the tapjacking/overlay attack.

Bug: 205595291
Test: atest CtsHarmfulAppWarningHostTestCases
Change-Id: Ia1a1ae0dc451e04bf5c31e3cb8cf30a0d8e32991
(cherry picked from commit a04b3666)
(cherry picked from commit f36b7b9f)
Merged-In: Ia1a1ae0dc451e04bf5c31e3cb8cf30a0d8e32991
parent b7ecc9d0

core/java/com/android/internal/app/HarmfulAppWarningActivity.java

+3 −0
Original line number Diff line number Diff line
@@ -16,6 +16,8 @@ 


package com.android.internal.app;



import static android.view.WindowManager.LayoutParams.PRIVATE_FLAG_HIDE_NON_SYSTEM_OVERLAY_WINDOWS;



import android.content.Context;

import android.content.DialogInterface;

import android.content.Intent;
@@ -47,6 +49,7 @@ public class HarmfulAppWarningActivity extends AlertActivity implements 
    protected void onCreate(Bundle savedInstanceState) {

        super.onCreate(savedInstanceState);



        getWindow().addPrivateFlags(PRIVATE_FLAG_HIDE_NON_SYSTEM_OVERLAY_WINDOWS);

        final Intent intent = getIntent();

        mPackageName = intent.getStringExtra(Intent.EXTRA_PACKAGE_NAME);

        mTarget = intent.getParcelableExtra(Intent.EXTRA_INTENT);