- 17aa5aa RESTRICT AUTOMERGE Delete keystore keys from RecoveryService.rebootRecoveryWithCommand() by Nikolay Elenkov · 7 months ago
- 0bacda2 RESTRICT AUTOMERGE Fix READ/WRITE operation access issues on Restricted appOps. by Hao Ke · 9 months ago
- 5d930ba Hide SAW subwindows by Linus Tufvesson · 9 months ago
- 455b552 Restrict USB poups while setup is in progress by Kiran S · 8 months ago
- e6aa7ba Rate limiting PiP aspect ratio change request by Hongwei Wang · 1 year, 6 months ago
- 26522c0 RESTRICT AUTOMERGE Backport preventing BAL bypass via bound service by Nan Wu · 9 months ago
- 10aaf9a Fix security vulnerability of non-dynamic permission removal by Yi-an Chen · 9 months ago
- d6271c2 Fix security vulnerability allowing apps to start from background by Bishoy Gendy · 9 months ago
- e6c33e1 [PM] Send ACTION_PACKAGE_CHANGED when mimeGroups are changed by Ivan Chiang · 10 months ago
- 7f4ba31 [RESTRICT AUTOMERGE] AccessibilityManagerService: remove uninstalled services from enabled list after service update. by Ameer Armaly · 10 months ago
- e0d80b7 [CDM][CMD] Check permissions for CDM shell commands by Guojing Yuan · 1 year, 1 month ago
- 0c171d3 [DO NOT MERGE][Autofill Framework] Add in check for intent filter when by Haoran Zhang · 10 months ago
- f49d743 Add more checkKeyIntent checks to AccountManagerService. by Dmitry Dementyev · 10 months ago
- b75bb48 Hide window immediately if itself doesn't run hide animation by Riddle Hsu · 11 months ago
- a724561 Fix error handling for non-dynamic permissions by Yi-an Chen · 11 months ago
- 9190962 Check for NLS bind permission when rebinding services by Valentin Iftime · 11 months ago
- c469a0d Verify URI permission for channel sound update from NotificationListenerService by Valentin Iftime · 12 months ago
- 2bc89d4 Added throttle when reporting shortcut usage by Pinyao Ting · 1 year, 2 months ago
- a25615a Revert "Refactor the SADeviceState to AdiDeviceState" by Eric Laurent · 10 months ago
- 090485d Revert "AudioService: anonymize Bluetooth MAC addresses" by Eric Laurent · 10 months ago
- 84d7b63 Prioritize system toasts by Valentin Iftime · 1 year, 3 months ago
- b237168 Fix security vulnerability that creates user with no restrictions when accountOptions are too long. by Tetiana Meronyk · 1 year ago
- a6e78a3 Stop marking apps as privileged if they are not signed properly. by Alex Buynytskyy · 1 year ago
- 6806ba4 Don't store invalid pkgs when migrating filters by Julia Reynolds · 1 year, 1 month ago
- 00032f4 RESTRICT AUTOMERGE Added limitations for attributions to handle invalid cases by Kiran Ramachandra · 1 year, 1 month ago
- 95a92dc Close AccountManagerService.session after timeout. by Dmitry Dementyev · 1 year ago
- 8e2d1dc Disallow system apps to be installed/updated as instant. by Alex Buynytskyy · 1 year, 1 month ago
- 03b7386 Validate package names passed to the installer. by Alex Buynytskyy · 1 year, 2 months ago
- eccd83c Resolve custom printer icon boundary exploit. by kumarashishg · 1 year, 6 months ago
- 9b10fd9 Handle screen capture disabled state for multiple users by Rubin Xu · 1 year, 3 months ago
- a035450 AudioService: anonymize Bluetooth MAC addresses by Eric Laurent · 1 year, 3 months ago
- e9ad19e Refactor the SADeviceState to AdiDeviceState by Vlad Popa · 1 year, 7 months ago
- eb7f3a6 Enforce persisted snoozed notifications limits by Valentin Iftime · 1 year, 2 months ago
- 3279205 [RESTRICT AUTOMERGE] Check permission of Autofill icon URIs by Tim Yu · 1 year, 4 months ago
- e23bf10 Restrict activity launch when caller is running in the background by Christophe Pinelli · 1 year, 8 months ago
- 653f7b0 DO NOT MERGE Disallow Wallpaper service to launch activity from background. by Nan Wu · 2 years, 1 month ago
- 3fdf954 Do not allow setting notification access across users. by Evan Chen · 1 year, 3 months ago
- a3047b5 RESTRICT AUTOMERGE by Nan Wu · 1 year, 5 months ago
- 9532b69 [CDM] Validate component name length before requesting notification access. by Raphael Kim · 1 year, 4 months ago
- 6a9250e Truncate user data to a limit of 500 characters by Tetiana Meronyk · 1 year, 5 months ago
- 1a42ae5 Check URI permissions for resumable media artwork by Beth Thibodeau · 1 year, 5 months ago
- f4644b5 Stop using deprecated getParcelable method in AccountManagerService. by Dmitry Dementyev · 1 year, 3 months ago
- 9e0c05e Adding in verification of calling UID in onShellCommand by Kunal Malhotra · 2 years ago
- a5e5536 Validate userId when publishing shortcuts by Pinyao Ting · 1 year, 6 months ago
- ae768fb Restrict number of shortcuts can be added through addDynamicShortcuts by Pinyao Ting · 1 year, 7 months ago
- 1120bc7 Require permission to unlock keyguard by Marzia Favaro · 1 year, 6 months ago
- f229f0e Validate URI-based shortcut icon at creation time. by Pinyao Ting · 1 year, 6 months ago
- fe6fef4 Visit Uris related to Notification style extras by Matías Hernández · 1 year, 5 months ago
- d98abee Fix bypass BAL via `requestGeofence` by Lifu Tang · 1 year, 6 months ago
- b7bd7df Visit Uris added by WearableExtender by Matías Hernández · 1 year, 6 months ago
- 35ebd43 RESTRICT AUTOMERGE Unset StrongAuthFlags when unlocking a user profile by Haining Chen · 1 year, 10 months ago
- 442b439 DO NOT MERGE Fix BAL via notification.publicVersion by Nan Wu · 1 year, 7 months ago
- 935eb5e [DO NOT MERGE] Check caller's uid in backupAgentCreated callback by Piyush Mehrotra · 1 year, 6 months ago
- 08becc8 [DO NOT MERGE] Verify URI Permissions in Autofill RemoteViews by Tim Yu · 1 year, 7 months ago
- 5a3d0c1 Verify URI permissions for EXTRA_REMOTE_INPUT_HISTORY_ITEMS. by Ioana Alexandru · 1 year, 8 months ago
- f810d81 Update AccountManagerService checkKeyIntentParceledCorrectly. by Dmitry Dementyev · 1 year, 6 months ago
- 05b1ada Forbid granting access to NLSes with too-long component names by Matías Hernández · 1 year, 7 months ago
- 7428962 Ignore virtual presentation windows - RESTRICT AUTOMERGE by Achim Thesmann · 1 year, 8 months ago
- 20aedba DO NOT MERGE Revert "Verify URI permissions for EXTRA_REMOTE_INPUT_HISTORY_ITEMS." by Ioana Alexandru · 1 year, 7 months ago
- 0c3b7ec DO NOT MERGE Verify URI permissions in MediaMetadata by Michael Mikhail · 1 year, 8 months ago
- 70ec64d Update Pip launches to not enter pinned task if in background. by Hani Kazmi · 1 year, 8 months ago
- 06e772e Validate ComponentName for MediaButtonBroadcastReceiver by Iván Budnik · 1 year, 10 months ago
- 726247f Check URIs in notification public version. by Ioana Alexandru · 1 year, 8 months ago
- e7ccba6 Preserve flags for non-runtime permissions upon package update. by Hai Zhang · 1 year, 8 months ago
- ed3f25b Ensure policy has no absurdly long strings by Pavel Grafov · 1 year, 9 months ago
- cb6282e Verify URI permissions for notification shortcutIcon. by Ioana Alexandru · 1 year, 9 months ago
- d10b27e ActivityManagerService: Allow openContentUri from vendor/system/product. by Austin Borger · 1 year, 10 months ago
- 5b7edbf DO NOT MERGE: ActivityManager#killBackgroundProcesses can kill caller's own app only by Jing Ji · 2 years, 3 months ago
- 1aec7fe [RESTRICT AUTOMERGE] Prevent installing apps in policy restricted work profile using ADB by Sumedh Sen · 1 year, 10 months ago
- 3a44806 Verify URI permissions for EXTRA_REMOTE_INPUT_HISTORY_ITEMS. by Ioana Alexandru · 1 year, 9 months ago
- fa539c8 [1-time permissions] Use internal api to check proc states by Evan Severson · 2 years ago
- c00b7e7 Watch uid proc state instead of importance for 1-time permissions by Evan Severson · 2 years, 9 months ago
- fc1b999 Truncate ShortcutInfo Id by András Kurucz · 1 year, 9 months ago
- c451aa5 Grant URI permissions to the CallStyle-related ones by Matías Hernández · 1 year, 9 months ago
- 3af4465 Revert "Ensure that only SysUI can override pending intent launch flags" by Winson Chung · 2 years ago
- b151197 Ensure that only SysUI can override pending intent launch flags by Winson Chung · 2 years, 3 months ago
- 3721a8a Fix issues with setRemotePlaybackInfo by Beth Thibodeau · 1 year, 10 months ago
- 0c2601b Enforce DevicePolicyManager.setUserControlDisabledPackages in AppStandbyController by Alex Johnston · 1 year, 10 months ago
- b8e6044 Proper PendingIntent.queryIntentComponents implementation by John Wu · 2 years, 6 months ago
- 87cb895 Check key intent for selectors and prohibited flags by Brian Lee · 1 year, 11 months ago
- 44aeef1 Remove Activity if it enters PiP without window by Hongwei Wang · 1 year, 11 months ago
- a8cd2d5 Limit the number of shortcuts per app that can be retained by system by Pinyao Ting · 1 year, 11 months ago
- e0de423 Trim strings added to persistent snoozed notification storage. by Ioana Alexandru · 2 years ago
- 8542596 DO NOT MERGE Isolated processes must fail registering BRs. by Mugdha Lakhani · 2 years, 1 month ago
- a843957 Re-enforce MANAGE_ACTIVITY_TASKS for applySyncTransaction by Chris Li · 1 year, 11 months ago
- 2c1f16d Checks if AccessibilityServiceInfo is within parcelable size. by Daniel Norman · 1 year, 11 months ago
- eecb1f0 [RESTRICT AUTOMERGE][pm] still allow debuggable for system app downgrades by Songchun Fan · 2 years ago
- 08e20af [RESTRICT AUTOMERGE][pm] prevent system app downgrades of versions lower than preload by Songchun Fan · 2 years ago
- fcced37 [RESTRICT AUTOMERGE] Fix bypass BG-FGS and BAL via package manager APIs by Rhed Jao · 2 years ago
- 5b2886f Fix bypass BAL via LocationManager.requestFlush by Kate Montgomery · 2 years ago
- 4c2c027 Lower per-app NotificationChannelGroup limit. by Ioana Alexandru · 2 years ago
- 491eadf [RESTRICT AUTOMERGE] Limit length of the name in <uses-permission> by Jackal Guo · 2 years ago
- d3a636a DO NOT MERGE: Context#startInstrumentation could be started from SHELL only now. by Jing Ji · 2 years, 5 months ago
- 75147ee [RESTRICT AUTOMERGE] Strip part of the activity info of another uid if no privilege by Louis Chang · 2 years, 4 months ago
- 9b9e6fc Fix checkKeyIntentParceledCorrectly's bypass by Hao Ke · 2 years, 1 month ago
- 45d9e43 Checking if package belongs to UID before registering broadcast receiver by Kunal Malhotra · 2 years, 2 months ago
- 0e368fa Revert "Trim the activity info of another uid if no privilege" by Louis Chang · 2 years ago
- 6e0bdc0 Trim the activity info of another uid if no privilege by Louis Chang · 2 years, 4 months ago
- 8418e3a0 Revert "Ensure that only SysUI can override pending intent launch flags" by Winson Chung · 2 years ago
- dfd7091 Enforce MediaButtonReceiver ComponentName belongs to app by Iván Budnik · 2 years, 4 months ago