OSDN Git Service

Stop loading other package's font by default.
authorSeigo Nonaka <nona@google.com>
Thu, 22 Jun 2017 15:22:18 +0000 (08:22 -0700)
committerNeil Fuller <nfuller@google.com>
Fri, 23 Jun 2017 12:27:23 +0000 (12:27 +0000)
commitc25c3da8b67568bbcf52ae2060c5555f82b9e563
tree71509d2077dc6cbde3b6af2dfeacc2799e248af2
parent17c78a1e6b3cff406893c09bfcc6b145346bcd36
Stop loading other package's font by default.

Since CONTEXT_RESTRICTED is not a default flag of createPackageContext,
we can't rely on it for preventing unexpected font injections.
To protect developers and existing apps from a risk of font injection,
stop loading font from other package's resouce unless the developer
explicitly set CONTEXT_IGNORE_SECURITY.

Bug: 62813533
Bug: 62879353
Test: Manually done
Merged-In: I4442ddc48dadb5c968b444be86038b602074d301
Change-Id: I4442ddc48dadb5c968b444be86038b602074d301
(cherry picked from commit 6d6cd68660635d670b0cb17f348b7c1da13704b3)
core/java/android/app/ContextImpl.java
core/java/android/content/Context.java
core/java/android/content/ContextWrapper.java
core/java/android/widget/TextView.java
test-runner/src/android/test/mock/MockContext.java