Ignore "package:<package>" in MANAGE_OVERLAY_PERMISSION intent
Before this change, intents with action = MANAGE_OVERLAY_PERMISSION and data = URI "package:<package>" would redirect the user to the specific app screen with the toggle to grant SYSTEM_ALERT_WINDOW (SAW) permission. This makes it too easy for malicious apps to fool the user into enabling it and we know that exist malware attempts to do so. This CL redirects that intent to the screen that list all the apps requesting SAW permission, introducing some friction for the user, which hopefully will allow more time for consideration. This is consistent with how other access permission intents work. Test: Working on CTS Test: adb shell am start -a android.settings.action.MANAGE_OVERLAY_PERMISSION -d package:<package> goes to list of apps screen Test: adb shell am start -a android.settings.action.MANAGE_OVERLAY_PERMISSION also goes there Bug: 135920175 Change-Id: I02fb842106602dab7fc285d0741edb58432ac7ad
Loading
Please register or sign in to comment