Merge "Fix security vulnerability allowing apps to start from background" into main

        @Override

        public IBinder getBinderForSetQueue() throws RemoteException {

            return new ParcelableListBinder<QueueItem>((list) -> {

            return new ParcelableListBinder<QueueItem>(

                    (list) -> {

                        // Checking list items are instanceof QueueItem to validate against

                        // malicious apps calling it directly via reflection with non compilable

                        // items. See b/317048338 for more details

                        List<QueueItem> sanitizedQueue =

                                list.stream().filter(it -> it instanceof QueueItem).toList();

                        synchronized (mLock) {

                    mQueue = list;

                            mQueue = sanitizedQueue;

                        }

                        mHandler.post(MessageHandler.MSG_UPDATE_QUEUE);

                    });