1. 6806ba4 Don't store invalid pkgs when migrating filters by Julia Reynolds · 1 year ago
  2. 00032f4 RESTRICT AUTOMERGE Added limitations for attributions to handle invalid cases by Kiran Ramachandra · 1 year ago
  3. 95a92dc Close AccountManagerService.session after timeout. by Dmitry Dementyev · 12 months ago
  4. 8e2d1dc Disallow system apps to be installed/updated as instant. by Alex Buynytskyy · 1 year ago
  5. 03b7386 Validate package names passed to the installer. by Alex Buynytskyy · 1 year, 2 months ago
  6. eccd83c Resolve custom printer icon boundary exploit. by kumarashishg · 1 year, 5 months ago
  7. 9b10fd9 Handle screen capture disabled state for multiple users by Rubin Xu · 1 year, 2 months ago
  8. a035450 AudioService: anonymize Bluetooth MAC addresses by Eric Laurent · 1 year, 3 months ago
  9. e9ad19e Refactor the SADeviceState to AdiDeviceState by Vlad Popa · 1 year, 6 months ago
  10. eb7f3a6 Enforce persisted snoozed notifications limits by Valentin Iftime · 1 year, 2 months ago
  11. 3279205 [RESTRICT AUTOMERGE] Check permission of Autofill icon URIs by Tim Yu · 1 year, 4 months ago
  12. e23bf10 Restrict activity launch when caller is running in the background by Christophe Pinelli · 1 year, 8 months ago
  13. 653f7b0 DO NOT MERGE Disallow Wallpaper service to launch activity from background. by Nan Wu · 2 years, 1 month ago
  14. 3fdf954 Do not allow setting notification access across users. by Evan Chen · 1 year, 2 months ago
  15. a3047b5 RESTRICT AUTOMERGE by Nan Wu · 1 year, 4 months ago
  16. 9532b69 [CDM] Validate component name length before requesting notification access. by Raphael Kim · 1 year, 3 months ago
  17. 6a9250e Truncate user data to a limit of 500 characters by Tetiana Meronyk · 1 year, 4 months ago
  18. 1a42ae5 Check URI permissions for resumable media artwork by Beth Thibodeau · 1 year, 5 months ago
  19. f4644b5 Stop using deprecated getParcelable method in AccountManagerService. by Dmitry Dementyev · 1 year, 3 months ago
  20. 9e0c05e Adding in verification of calling UID in onShellCommand by Kunal Malhotra · 1 year, 11 months ago
  21. a5e5536 Validate userId when publishing shortcuts by Pinyao Ting · 1 year, 5 months ago
  22. ae768fb Restrict number of shortcuts can be added through addDynamicShortcuts by Pinyao Ting · 1 year, 7 months ago
  23. 1120bc7 Require permission to unlock keyguard by Marzia Favaro · 1 year, 5 months ago
  24. f229f0e Validate URI-based shortcut icon at creation time. by Pinyao Ting · 1 year, 6 months ago
  25. fe6fef4 Visit Uris related to Notification style extras by Matías Hernández · 1 year, 5 months ago
  26. d98abee Fix bypass BAL via `requestGeofence` by Lifu Tang · 1 year, 6 months ago
  27. b7bd7df Visit Uris added by WearableExtender by Matías Hernández · 1 year, 6 months ago
  28. 35ebd43 RESTRICT AUTOMERGE Unset StrongAuthFlags when unlocking a user profile by Haining Chen · 1 year, 9 months ago
  29. 442b439 DO NOT MERGE Fix BAL via notification.publicVersion by Nan Wu · 1 year, 6 months ago
  30. 935eb5e [DO NOT MERGE] Check caller's uid in backupAgentCreated callback by Piyush Mehrotra · 1 year, 5 months ago
  31. 08becc8 [DO NOT MERGE] Verify URI Permissions in Autofill RemoteViews by Tim Yu · 1 year, 6 months ago
  32. 5a3d0c1 Verify URI permissions for EXTRA_REMOTE_INPUT_HISTORY_ITEMS. by Ioana Alexandru · 1 year, 8 months ago
  33. f810d81 Update AccountManagerService checkKeyIntentParceledCorrectly. by Dmitry Dementyev · 1 year, 6 months ago
  34. 05b1ada Forbid granting access to NLSes with too-long component names by Matías Hernández · 1 year, 7 months ago
  35. 7428962 Ignore virtual presentation windows - RESTRICT AUTOMERGE by Achim Thesmann · 1 year, 7 months ago
  36. 20aedba DO NOT MERGE Revert "Verify URI permissions for EXTRA_REMOTE_INPUT_HISTORY_ITEMS." by Ioana Alexandru · 1 year, 6 months ago
  37. 0c3b7ec DO NOT MERGE Verify URI permissions in MediaMetadata by Michael Mikhail · 1 year, 7 months ago
  38. 70ec64d Update Pip launches to not enter pinned task if in background. by Hani Kazmi · 1 year, 7 months ago
  39. 06e772e Validate ComponentName for MediaButtonBroadcastReceiver by Iván Budnik · 1 year, 9 months ago
  40. 726247f Check URIs in notification public version. by Ioana Alexandru · 1 year, 8 months ago
  41. e7ccba6 Preserve flags for non-runtime permissions upon package update. by Hai Zhang · 1 year, 8 months ago
  42. ed3f25b Ensure policy has no absurdly long strings by Pavel Grafov · 1 year, 9 months ago
  43. cb6282e Verify URI permissions for notification shortcutIcon. by Ioana Alexandru · 1 year, 8 months ago
  44. d10b27e ActivityManagerService: Allow openContentUri from vendor/system/product. by Austin Borger · 1 year, 9 months ago
  45. 5b7edbf DO NOT MERGE: ActivityManager#killBackgroundProcesses can kill caller's own app only by Jing Ji · 2 years, 2 months ago
  46. 1aec7fe [RESTRICT AUTOMERGE] Prevent installing apps in policy restricted work profile using ADB by Sumedh Sen · 1 year, 9 months ago
  47. 3a44806 Verify URI permissions for EXTRA_REMOTE_INPUT_HISTORY_ITEMS. by Ioana Alexandru · 1 year, 8 months ago
  48. fa539c8 [1-time permissions] Use internal api to check proc states by Evan Severson · 1 year, 11 months ago
  49. c00b7e7 Watch uid proc state instead of importance for 1-time permissions by Evan Severson · 2 years, 9 months ago
  50. fc1b999 Truncate ShortcutInfo Id by András Kurucz · 1 year, 8 months ago
  51. c451aa5 Grant URI permissions to the CallStyle-related ones by Matías Hernández · 1 year, 9 months ago
  52. 3af4465 Revert "Ensure that only SysUI can override pending intent launch flags" by Winson Chung · 2 years ago
  53. b151197 Ensure that only SysUI can override pending intent launch flags by Winson Chung · 2 years, 2 months ago
  54. 3721a8a Fix issues with setRemotePlaybackInfo by Beth Thibodeau · 1 year, 10 months ago
  55. 0c2601b Enforce DevicePolicyManager.setUserControlDisabledPackages in AppStandbyController by Alex Johnston · 1 year, 10 months ago
  56. b8e6044 Proper PendingIntent.queryIntentComponents implementation by John Wu · 2 years, 6 months ago
  57. 87cb895 Check key intent for selectors and prohibited flags by Brian Lee · 1 year, 10 months ago
  58. 44aeef1 Remove Activity if it enters PiP without window by Hongwei Wang · 1 year, 10 months ago
  59. a8cd2d5 Limit the number of shortcuts per app that can be retained by system by Pinyao Ting · 1 year, 11 months ago
  60. e0de423 Trim strings added to persistent snoozed notification storage. by Ioana Alexandru · 2 years ago
  61. 8542596 DO NOT MERGE Isolated processes must fail registering BRs. by Mugdha Lakhani · 2 years ago
  62. a843957 Re-enforce MANAGE_ACTIVITY_TASKS for applySyncTransaction by Chris Li · 1 year, 11 months ago
  63. 2c1f16d Checks if AccessibilityServiceInfo is within parcelable size. by Daniel Norman · 1 year, 11 months ago
  64. eecb1f0 [RESTRICT AUTOMERGE][pm] still allow debuggable for system app downgrades by Songchun Fan · 1 year, 11 months ago
  65. 08e20af [RESTRICT AUTOMERGE][pm] prevent system app downgrades of versions lower than preload by Songchun Fan · 1 year, 11 months ago
  66. fcced37 [RESTRICT AUTOMERGE] Fix bypass BG-FGS and BAL via package manager APIs by Rhed Jao · 2 years ago
  67. 5b2886f Fix bypass BAL via LocationManager.requestFlush by Kate Montgomery · 1 year, 11 months ago
  68. 4c2c027 Lower per-app NotificationChannelGroup limit. by Ioana Alexandru · 2 years ago
  69. 491eadf [RESTRICT AUTOMERGE] Limit length of the name in <uses-permission> by Jackal Guo · 2 years ago
  70. d3a636a DO NOT MERGE: Context#startInstrumentation could be started from SHELL only now. by Jing Ji · 2 years, 5 months ago
  71. 75147ee [RESTRICT AUTOMERGE] Strip part of the activity info of another uid if no privilege by Louis Chang · 2 years, 3 months ago
  72. 9b9e6fc Fix checkKeyIntentParceledCorrectly's bypass by Hao Ke · 2 years, 1 month ago
  73. 45d9e43 Checking if package belongs to UID before registering broadcast receiver by Kunal Malhotra · 2 years, 2 months ago
  74. 0e368fa Revert "Trim the activity info of another uid if no privilege" by Louis Chang · 2 years ago
  75. 6e0bdc0 Trim the activity info of another uid if no privilege by Louis Chang · 2 years, 3 months ago
  76. 8418e3a0 Revert "Ensure that only SysUI can override pending intent launch flags" by Winson Chung · 2 years ago
  77. dfd7091 Enforce MediaButtonReceiver ComponentName belongs to app by Iván Budnik · 2 years, 4 months ago
  78. e50b9c8 Enforce MediaButtonReceiver extracted component name matches session package name by Iván Budnik · 2 years, 3 months ago
  79. fb3a4c2 Enable user graularity for lockdown mode by Wenhao Wang · 2 years, 4 months ago
  80. 2af7cde Revert "Trim the activity info of another uid if no privilege" by Louis Chang · 2 years ago
  81. 8f55482 RESTRICT AUTOMERGE Use chain start token in performOpTransaction by Nate Myren · 2 years, 2 months ago
  82. 4ade974 Use rule package name in addAutomaticZenRule; specify "android" for all system apps by Yuri Lin · 2 years, 2 months ago
  83. e94e04e [RESTRICT AUTOMERGE] Correct the behavior of ACTION_PACKAGE_DATA_CLEARED by Jackal Guo · 2 years, 2 months ago
  84. cc59bd0 [DO NOT MERGE] Revert "Check rule package name in ZenModeHelper.addAutomaticRule" by Yuri Lin · 2 years, 2 months ago
  85. de6824b [DO NOT MERGE] Revert "Fix system zen rules by using owner package name if caller is system" by Yuri Lin · 2 years, 2 months ago
  86. 4113e0a Fix system zen rules by using owner package name if caller is system by Yuri Lin · 2 years, 4 months ago
  87. 490fc26 Check rule package name in ZenModeHelper.addAutomaticRule by Yuri Lin · 2 years, 4 months ago
  88. 16c604a Ensure that only SysUI can override pending intent launch flags by Winson Chung · 2 years, 2 months ago
  89. 9ad3d25 RESTRICT AUTOMERGE Revoke SYSTEM_ALERT_WINDOW on upgrade past api 23 by Nate Myren · 2 years, 3 months ago
  90. 640e625 Trim the activity info of another uid if no privilege by Louis Chang · 2 years, 3 months ago
  91. 6f8dc4d RESTRICT AUTOMERGE Validate permission tree size on permission update by Nate Myren · 2 years, 3 months ago
  92. 6422cba Disable all A11yServices from an uninstalled package. by Daniel Norman · 2 years, 3 months ago
  93. 0407c04 Limit length and number of MIME types you can set by William Loh · 2 years, 5 months ago
  94. 7a65289 [DO NOT MERGE] Revert "Check rule package name in ZenModeHelper.addAutomaticRule" by Yuri Lin · 2 years, 2 months ago
  95. 73b491f [DO NOT MERGE] Revert "Fix system zen rules by using owner package name if caller is system" by Yuri Lin · 2 years, 2 months ago
  96. cff7c94 Add safety checks on KEY_INTENT mismatch. by Hao Ke · 2 years, 3 months ago
  97. 447333a Lower per-app notificationchannel limit by Julia Reynolds · 2 years, 4 months ago
  98. 56dd904 Ignore malformed shortcuts by Pinyao Ting · 2 years, 3 months ago
  99. 6c61ae1 Allow activity to be reparent while allowTaskReparenting is applied by Jeff Chang · 2 years, 4 months ago
  100. 3712947 Fix a security issue in app widget service. by Pinyao Ting · 2 years, 6 months ago