Reapply "opp: validate that content uri belongs to current user"
Check that the userInfo part of the content URI is either implicit or the same as the current userId. This reverts commit db25b125. Bug: 296915500 Flag: EXEMPT fix for vulnerability Test: atest GoogleBluetoothInstrumentationTests:BluetoothOppSendFileInfoTest Ignore-AOSP-First: fix for undisclosed vulnerability (cherry picked from https://googleplex-android-review.googlesource.com/q/commit:b5d66a17fa296117b44f23ae45ff7338cee6ae85) (cherry picked from https://googleplex-android-review.googlesource.com/q/commit:e17b3fcb3946abf2f307fc8393ecc347c3df67d9) Merged-In: I76b25fcd446d5e0530308e21deafa68d0b768edc Change-Id: I76b25fcd446d5e0530308e21deafa68d0b768edc
Loading
Please register or sign in to comment