Add resolveActivityAsUserForExplicitType api to pm
allow checking for resolved activity for an intent with a specific type allowing the intent to declare its own type can lead to a security vulnerability if the intent changes its type after the IntentForwarder#canForward check. Use the new API in IntentForwarderActivity to prevent checking the intent's type twice. Update other call sites of IntentForwarder#canForward to extract the resolved type from the intent and pass in to to the method call Check the launch package rather than calling package sanitize intent selector as well as received intent Bug: 403565650 407763772 397216638 Flag: EXEMPT bugfix Test: manually tested (cherry picked from https://googleplex-android-review.googlesource.com/q/commit:57233409d9bb5aef50373760a9b6551aa618c808) Merged-In: I8453f25ed5ddd938718f4d2be4983c881778f281 Change-Id: I8453f25ed5ddd938718f4d2be4983c881778f281
Loading
Please register or sign in to comment