| commit | 5310c406400f71c2c540f23903a6766fbf58db1a | [log] [tgz] |
|---|---|---|
| author | Jason Chiu <chiujason@google.com> | Thu Mar 23 15:30:19 2023 +0800 |
| committer | Jason Chiu <chiujason@google.com> | Mon Mar 27 11:59:07 2023 +0800 |
| tree | 4ad49c5bf00eff95e59ac6a7c2ba90673b924afb | |
| parent | d1d2374b8940c24a7d1e2c28988027a59f091df7 [diff] |
Refine permission check process of 2-pane deep link - Check the deep link activity instance before rediercting to the internal activity for the managed profile invocation so the caller can't bypass the permission check. - Get the referrer as the caller so that onNewIntent can recognize the new caller and check if it has a permission to open the target page. Test: robotest & manual Bug: 268193384 Bug: 272437506 Change-Id: Ie69742983fb74ee2316b7aad16461db95ed927c2