- eccd83c Resolve custom printer icon boundary exploit. by kumarashishg · 1 year, 5 months ago
- 9b10fd9 Handle screen capture disabled state for multiple users by Rubin Xu · 1 year, 2 months ago
- a035450 AudioService: anonymize Bluetooth MAC addresses by Eric Laurent · 1 year, 3 months ago
- e9ad19e Refactor the SADeviceState to AdiDeviceState by Vlad Popa · 1 year, 6 months ago
- eb7f3a6 Enforce persisted snoozed notifications limits by Valentin Iftime · 1 year, 2 months ago
- 3279205 [RESTRICT AUTOMERGE] Check permission of Autofill icon URIs by Tim Yu · 1 year, 4 months ago
- e23bf10 Restrict activity launch when caller is running in the background by Christophe Pinelli · 1 year, 8 months ago
- 653f7b0 DO NOT MERGE Disallow Wallpaper service to launch activity from background. by Nan Wu · 2 years, 1 month ago
- 3fdf954 Do not allow setting notification access across users. by Evan Chen · 1 year, 2 months ago
- a3047b5 RESTRICT AUTOMERGE by Nan Wu · 1 year, 4 months ago
- 9532b69 [CDM] Validate component name length before requesting notification access. by Raphael Kim · 1 year, 3 months ago
- 6a9250e Truncate user data to a limit of 500 characters by Tetiana Meronyk · 1 year, 4 months ago
- 1a42ae5 Check URI permissions for resumable media artwork by Beth Thibodeau · 1 year, 5 months ago
- f4644b5 Stop using deprecated getParcelable method in AccountManagerService. by Dmitry Dementyev · 1 year, 3 months ago
- 9e0c05e Adding in verification of calling UID in onShellCommand by Kunal Malhotra · 1 year, 11 months ago
- a5e5536 Validate userId when publishing shortcuts by Pinyao Ting · 1 year, 5 months ago
- ae768fb Restrict number of shortcuts can be added through addDynamicShortcuts by Pinyao Ting · 1 year, 7 months ago
- 1120bc7 Require permission to unlock keyguard by Marzia Favaro · 1 year, 5 months ago
- f229f0e Validate URI-based shortcut icon at creation time. by Pinyao Ting · 1 year, 6 months ago
- fe6fef4 Visit Uris related to Notification style extras by Matías Hernández · 1 year, 5 months ago
- d98abee Fix bypass BAL via `requestGeofence` by Lifu Tang · 1 year, 6 months ago
- b7bd7df Visit Uris added by WearableExtender by Matías Hernández · 1 year, 6 months ago
- 35ebd43 RESTRICT AUTOMERGE Unset StrongAuthFlags when unlocking a user profile by Haining Chen · 1 year, 9 months ago
- 442b439 DO NOT MERGE Fix BAL via notification.publicVersion by Nan Wu · 1 year, 6 months ago
- 935eb5e [DO NOT MERGE] Check caller's uid in backupAgentCreated callback by Piyush Mehrotra · 1 year, 5 months ago
- 08becc8 [DO NOT MERGE] Verify URI Permissions in Autofill RemoteViews by Tim Yu · 1 year, 6 months ago
- 5a3d0c1 Verify URI permissions for EXTRA_REMOTE_INPUT_HISTORY_ITEMS. by Ioana Alexandru · 1 year, 8 months ago
- f810d81 Update AccountManagerService checkKeyIntentParceledCorrectly. by Dmitry Dementyev · 1 year, 6 months ago
- 05b1ada Forbid granting access to NLSes with too-long component names by Matías Hernández · 1 year, 7 months ago
- 7428962 Ignore virtual presentation windows - RESTRICT AUTOMERGE by Achim Thesmann · 1 year, 7 months ago
- 20aedba DO NOT MERGE Revert "Verify URI permissions for EXTRA_REMOTE_INPUT_HISTORY_ITEMS." by Ioana Alexandru · 1 year, 6 months ago
- 0c3b7ec DO NOT MERGE Verify URI permissions in MediaMetadata by Michael Mikhail · 1 year, 7 months ago
- 70ec64d Update Pip launches to not enter pinned task if in background. by Hani Kazmi · 1 year, 7 months ago
- 06e772e Validate ComponentName for MediaButtonBroadcastReceiver by Iván Budnik · 1 year, 9 months ago
- 726247f Check URIs in notification public version. by Ioana Alexandru · 1 year, 8 months ago
- e7ccba6 Preserve flags for non-runtime permissions upon package update. by Hai Zhang · 1 year, 8 months ago
- ed3f25b Ensure policy has no absurdly long strings by Pavel Grafov · 1 year, 9 months ago
- cb6282e Verify URI permissions for notification shortcutIcon. by Ioana Alexandru · 1 year, 8 months ago
- d10b27e ActivityManagerService: Allow openContentUri from vendor/system/product. by Austin Borger · 1 year, 9 months ago
- 5b7edbf DO NOT MERGE: ActivityManager#killBackgroundProcesses can kill caller's own app only by Jing Ji · 2 years, 2 months ago
- 1aec7fe [RESTRICT AUTOMERGE] Prevent installing apps in policy restricted work profile using ADB by Sumedh Sen · 1 year, 9 months ago
- 3a44806 Verify URI permissions for EXTRA_REMOTE_INPUT_HISTORY_ITEMS. by Ioana Alexandru · 1 year, 8 months ago
- fa539c8 [1-time permissions] Use internal api to check proc states by Evan Severson · 1 year, 11 months ago
- c00b7e7 Watch uid proc state instead of importance for 1-time permissions by Evan Severson · 2 years, 9 months ago
- fc1b999 Truncate ShortcutInfo Id by András Kurucz · 1 year, 8 months ago
- c451aa5 Grant URI permissions to the CallStyle-related ones by Matías Hernández · 1 year, 9 months ago
- 3af4465 Revert "Ensure that only SysUI can override pending intent launch flags" by Winson Chung · 2 years ago
- b151197 Ensure that only SysUI can override pending intent launch flags by Winson Chung · 2 years, 2 months ago
- 3721a8a Fix issues with setRemotePlaybackInfo by Beth Thibodeau · 1 year, 10 months ago
- 0c2601b Enforce DevicePolicyManager.setUserControlDisabledPackages in AppStandbyController by Alex Johnston · 1 year, 10 months ago
- b8e6044 Proper PendingIntent.queryIntentComponents implementation by John Wu · 2 years, 6 months ago
- 87cb895 Check key intent for selectors and prohibited flags by Brian Lee · 1 year, 10 months ago
- 44aeef1 Remove Activity if it enters PiP without window by Hongwei Wang · 1 year, 10 months ago
- a8cd2d5 Limit the number of shortcuts per app that can be retained by system by Pinyao Ting · 1 year, 11 months ago
- e0de423 Trim strings added to persistent snoozed notification storage. by Ioana Alexandru · 2 years ago
- 8542596 DO NOT MERGE Isolated processes must fail registering BRs. by Mugdha Lakhani · 2 years ago
- a843957 Re-enforce MANAGE_ACTIVITY_TASKS for applySyncTransaction by Chris Li · 1 year, 11 months ago
- 2c1f16d Checks if AccessibilityServiceInfo is within parcelable size. by Daniel Norman · 1 year, 11 months ago
- eecb1f0 [RESTRICT AUTOMERGE][pm] still allow debuggable for system app downgrades by Songchun Fan · 1 year, 11 months ago
- 08e20af [RESTRICT AUTOMERGE][pm] prevent system app downgrades of versions lower than preload by Songchun Fan · 1 year, 11 months ago
- fcced37 [RESTRICT AUTOMERGE] Fix bypass BG-FGS and BAL via package manager APIs by Rhed Jao · 2 years ago
- 5b2886f Fix bypass BAL via LocationManager.requestFlush by Kate Montgomery · 1 year, 11 months ago
- 4c2c027 Lower per-app NotificationChannelGroup limit. by Ioana Alexandru · 2 years ago
- 491eadf [RESTRICT AUTOMERGE] Limit length of the name in <uses-permission> by Jackal Guo · 2 years ago
- d3a636a DO NOT MERGE: Context#startInstrumentation could be started from SHELL only now. by Jing Ji · 2 years, 5 months ago
- 75147ee [RESTRICT AUTOMERGE] Strip part of the activity info of another uid if no privilege by Louis Chang · 2 years, 3 months ago
- 9b9e6fc Fix checkKeyIntentParceledCorrectly's bypass by Hao Ke · 2 years, 1 month ago
- 45d9e43 Checking if package belongs to UID before registering broadcast receiver by Kunal Malhotra · 2 years, 2 months ago
- 0e368fa Revert "Trim the activity info of another uid if no privilege" by Louis Chang · 2 years ago
- 6e0bdc0 Trim the activity info of another uid if no privilege by Louis Chang · 2 years, 3 months ago
- 8418e3a0 Revert "Ensure that only SysUI can override pending intent launch flags" by Winson Chung · 2 years ago
- dfd7091 Enforce MediaButtonReceiver ComponentName belongs to app by Iván Budnik · 2 years, 4 months ago
- e50b9c8 Enforce MediaButtonReceiver extracted component name matches session package name by Iván Budnik · 2 years, 3 months ago
- fb3a4c2 Enable user graularity for lockdown mode by Wenhao Wang · 2 years, 4 months ago
- 2af7cde Revert "Trim the activity info of another uid if no privilege" by Louis Chang · 2 years ago
- 8f55482 RESTRICT AUTOMERGE Use chain start token in performOpTransaction by Nate Myren · 2 years, 2 months ago
- 4ade974 Use rule package name in addAutomaticZenRule; specify "android" for all system apps by Yuri Lin · 2 years, 2 months ago
- e94e04e [RESTRICT AUTOMERGE] Correct the behavior of ACTION_PACKAGE_DATA_CLEARED by Jackal Guo · 2 years, 2 months ago
- cc59bd0 [DO NOT MERGE] Revert "Check rule package name in ZenModeHelper.addAutomaticRule" by Yuri Lin · 2 years, 2 months ago
- de6824b [DO NOT MERGE] Revert "Fix system zen rules by using owner package name if caller is system" by Yuri Lin · 2 years, 2 months ago
- 4113e0a Fix system zen rules by using owner package name if caller is system by Yuri Lin · 2 years, 4 months ago
- 490fc26 Check rule package name in ZenModeHelper.addAutomaticRule by Yuri Lin · 2 years, 4 months ago
- 16c604a Ensure that only SysUI can override pending intent launch flags by Winson Chung · 2 years, 2 months ago
- 9ad3d25 RESTRICT AUTOMERGE Revoke SYSTEM_ALERT_WINDOW on upgrade past api 23 by Nate Myren · 2 years, 3 months ago
- 640e625 Trim the activity info of another uid if no privilege by Louis Chang · 2 years, 3 months ago
- 6f8dc4d RESTRICT AUTOMERGE Validate permission tree size on permission update by Nate Myren · 2 years, 3 months ago
- 6422cba Disable all A11yServices from an uninstalled package. by Daniel Norman · 2 years, 3 months ago
- 0407c04 Limit length and number of MIME types you can set by William Loh · 2 years, 5 months ago
- 7a65289 [DO NOT MERGE] Revert "Check rule package name in ZenModeHelper.addAutomaticRule" by Yuri Lin · 2 years, 2 months ago
- 73b491f [DO NOT MERGE] Revert "Fix system zen rules by using owner package name if caller is system" by Yuri Lin · 2 years, 2 months ago
- cff7c94 Add safety checks on KEY_INTENT mismatch. by Hao Ke · 2 years, 3 months ago
- 447333a Lower per-app notificationchannel limit by Julia Reynolds · 2 years, 4 months ago
- 56dd904 Ignore malformed shortcuts by Pinyao Ting · 2 years, 3 months ago
- 6c61ae1 Allow activity to be reparent while allowTaskReparenting is applied by Jeff Chang · 2 years, 4 months ago
- 3712947 Fix a security issue in app widget service. by Pinyao Ting · 2 years, 6 months ago
- 423bbde [pm] forbid deletion of protected packages by Songchun Fan · 2 years, 4 months ago
- 77a5410 Include all enabled services when FEEDBACK_ALL_MASK. by Daniel Norman · 2 years, 4 months ago
- 85ca64e Validate package name passed to setApplicationRestrictions. (Reland) by Oli Lan · 2 years, 4 months ago
- 33d74fb Prevent non-admin users from deleting system apps. by Oli Lan · 2 years, 5 months ago
- 86dbbfe Revert "Prevent non-admin users from deleting system apps." by Oli Lan · 2 years, 5 months ago