Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Skip to content
Commit 70dd7c6e authored by Billy Huang's avatar Billy Huang
Browse files

opp: validate that content uri belongs to current user

Most helpers in ContentProvider are hidden.
Use ContentProvider.createContentUriForUser which
is callable by modules to validate the uri.

Bug: 296915500
Flag: EXEMPT fix for vulnerability
Test: atest GoogleBluetoothInstrumentationTests:BluetoothOppSendFileInfoTest#generateFileInfo_withContentUriForOtherUser_returnsSendFileInfoError
Ignore-AOSP-First: fix for undisclosed vulnerability
Change-Id: I13e3747b17017066c1bd3cc8cd5796eab2c3eb4f
parent 4d6603a1
Loading
Loading
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment