summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorTreehugger Robot <treehugger-gerrit@google.com>2021-09-08 23:43:41 +0000
committerAutomerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>2021-09-08 23:43:41 +0000
commit10316a499a7129f971e8f0d53ffc4bd586e5bd30 (patch)
tree18259ca4a0c5602dcf68def68926e40458b8208a
parente4cfbe279dd82ed587a20ab599f3ae6f55c4fc1f (diff)
parent6b2b728f340804dea512ee52804ffd33f9d019da (diff)
downloadQuickSearchBox-10316a499a7129f971e8f0d53ffc4bd586e5bd30.tar.gz
Merge "Secure the pendingIntent in SearchWidgetProvider." am: 6f94db4286 am: 57be39752d am: a42ed2b8dc am: 1c8f4163cf am: a948aa19aa am: 69b0eb8b4e am: 4d67d2c273 am: 6b2b728f34
Original change: https://googleplex-android-review.googlesource.com/c/platform/packages/apps/QuickSearchBox/+/15779144 Change-Id: Iffd4aa253d01a49937a971588eeb55f27a56f9ee
-rw-r--r--src/com/android/quicksearchbox/SearchWidgetProvider.java4
1 files changed, 3 insertions, 1 deletions
diff --git a/src/com/android/quicksearchbox/SearchWidgetProvider.java b/src/com/android/quicksearchbox/SearchWidgetProvider.java
index 205e7cc..8f2a6c8 100644
--- a/src/com/android/quicksearchbox/SearchWidgetProvider.java
+++ b/src/com/android/quicksearchbox/SearchWidgetProvider.java
@@ -178,7 +178,9 @@ public class SearchWidgetProvider extends BroadcastReceiver {
private void setOnClickActivityIntent(Context context, RemoteViews views, int viewId,
Intent intent) {
- PendingIntent pendingIntent = PendingIntent.getActivity(context, 0, intent, 0);
+ intent.setPackage(context.getPackageName());
+ PendingIntent pendingIntent = PendingIntent.getActivity(
+ context, 0, intent, PendingIntent.FLAG_IMMUTABLE);
views.setOnClickPendingIntent(viewId, pendingIntent);
}
}