tree c3f49467b941c007f9f399ede315b6771f17ebb4
parent bf69ef034a35e39e5bd2c0f6395d3c88ace5fa58
author Christophe Pinelli <cpinelli@google.com> 1673466221 +0000
committer Christophe Pinelli <cpinelli@google.com> 1673488304 +0000

Make mutable PendingIntent explicit

Starting from target SDK U, we will block creation of mutable
PendingIntents with implicit Intents because attackers can mutate the
Intent object within and launch altered behavior on behalf of victim
apps. For more details on the vulnerability, see go/pendingintent-rca.

From a quick analysis, we concluded that the PendingIntent here was only
destined to the test app/to the app, so it was made explicit. Reviewers,
please call out if this is not the case.

Bug: 236704164
Test: atest NexusLauncherTests:com.android.quickstep.DigitalWellBeingToastTest
Test: atest RequestPinItemTest
Change-Id: I81311b0588b7b712c97de6cb016a62bb91c7a77c