1. d496625 RESTRICT AUTOMERGE by Nan Wu · 11 months ago
  2. b9323252 [SB][Privacy] Fetch current active appops on startup. by Caitlin Shkuratov · 11 months ago
  3. 9ccf002 [CDM] Validate component name length before requesting notification access. by Raphael Kim · 10 months ago
  4. 65c5db5 Truncate user data to a limit of 500 characters by Tetiana Meronyk · 9 months ago
  5. 72f408c DO NOT MERGE Ensure finish lockscreen when usersetup incomplete by Aaron Liu · 11 months ago
  6. 4909ca5 Dismiss keyguard when simpin auth'd and... by Aaron Liu · 1 year, 4 months ago
  7. cb74878 Merge cherrypicks of ['googleplex-android-review.googlesource.com/23905843', 'googleplex-android-review.googlesource.com/23918399', 'googleplex-android-review.googlesource.com/24420396', 'googleplex-android-review.googlesource.com/20064766', 'googleplex-android-review.googlesource.com/24046929', 'googleplex-android-review.googlesource.com/24573550', 'googleplex-android-review.googlesource.com/24339446', 'googleplex-android-review.googlesource.com/23623415', 'googleplex-android-review.googlesource.com/24605805', 'googleplex-android-review.googlesource.com/24182288', 'googleplex-android-review.googlesource.com/24761005', 'googleplex-android-review.googlesource.com/24058898', 'googleplex-android-review.googlesource.com/24805807', 'googleplex-android-review.googlesource.com/22465294', 'googleplex-android-review.googlesource.com/24642267'] into security-aosp-sc-release. by Android Build Coastguard Worker · 9 months ago android-security-12.0.0_r54
  8. 6fab80f RESTRICT AUTOMERGE: Check URI permissions for resumable media artwork by Beth Thibodeau · 12 months ago
  9. 1857ee3 Move startWatchingModeWithFlags to the native supported binder calls by Evan Severson · 1 year, 4 months ago
  10. a6bf6bd Updated: always show the keyguard on device lockdown by Beverly Tai · 10 months ago
  11. 912f0f6 Adding in verification of calling UID in onShellCommand by Kunal Malhotra · 1 year, 6 months ago
  12. 25240a9 Revert "On device lockdown, always show the keyguard" by Beverly Tai · 10 months ago
  13. 3e64d4d Validate userId when publishing shortcuts by Pinyao Ting · 12 months ago
  14. 8149666 Use readUniqueFileDescriptor in incidentd service by Pawan Wagh · 1 year, 1 month ago
  15. d85791d Restrict number of shortcuts can be added through addDynamicShortcuts by Pinyao Ting · 1 year, 1 month ago
  16. 2b36798 Require permission to unlock keyguard by Marzia Favaro · 12 months ago
  17. d76c64b Disable priority conversation widget for secondary users by Julia Reynolds · 12 months ago
  18. 70cd64e Validate URI-based shortcut icon at creation time. by Pinyao Ting · 1 year ago
  19. ae1a6339 RESTRICT AUTOMERGE: Drop invalid data. by Kweku Adams · 1 year, 10 months ago
  20. 92d2e87 Visit Uris related to Notification style extras by Matías Hernández · 11 months ago
  21. 6726ac5 Fix bypass BAL via `requestGeofence` by Lifu Tang · 1 year ago
  22. 84221f9 Visit Uris added by WearableExtender by Matías Hernández · 1 year, 1 month ago
  23. 1f5394d Merge cherrypicks of ['googleplex-android-review.googlesource.com/23983543', 'googleplex-android-review.googlesource.com/24323875', 'googleplex-android-review.googlesource.com/24310277', 'googleplex-android-review.googlesource.com/24424817'] into security-aosp-sc-release. by Android Build Coastguard Worker · 11 months ago android-security-12.0.0_r53
  24. 8253d2f [SettingsProvider] verify ringtone URI before setting by Songchun Fan · 11 months ago
  25. a65cc99 Use type safe API of readParcelableArray by kumarashishg · 12 months ago
  26. a3fe1c4 [DO NOT MERGE] Check caller's uid in backupAgentCreated callback by Piyush Mehrotra · 12 months ago
  27. f4f3013 DO NOT MERGE Fix BAL via notification.publicVersion by Nan Wu · 1 year, 1 month ago
  28. 8668fcd Merge cherrypicks of ['googleplex-android-review.googlesource.com/24405933'] into security-aosp-sc-release. by Android Build Coastguard Worker · 11 months ago android-security-12.0.0_r52
  29. 2f91627 Merge cherrypicks of ['googleplex-android-review.googlesource.com/21027119', 'googleplex-android-review.googlesource.com/23769813', 'googleplex-android-review.googlesource.com/23877020', 'googleplex-android-review.googlesource.com/23785419', 'googleplex-android-review.googlesource.com/23846753', 'googleplex-android-review.googlesource.com/23835332', 'googleplex-android-review.googlesource.com/23423703', 'googleplex-android-review.googlesource.com/24057913', 'googleplex-android-review.googlesource.com/23982204', 'googleplex-android-review.googlesource.com/24301239', 'googleplex-android-review.googlesource.com/24272818', 'googleplex-android-review.googlesource.com/24325301'] into security-aosp-sc-release. by Android Build Coastguard Worker · 11 months ago
  30. 146b2fd Revert "Dismiss keyguard when simpin auth'd and..." by Aaron Liu · 11 months ago
  31. 883923c Add placeholder when media control title is blank by Beth Thibodeau · 1 year, 2 months ago
  32. 438fabc [RESTRICT AUTOMERGE] Ignore small source rect hint by Hongwei Wang · 12 months ago
  33. d7e13c9 RESTRICT AUTOMERGE: SettingsProvider: exclude secure_frp_mode from resets by Eric Biggers · 12 months ago
  34. 3377062c Add userId check before loading icon in Device Controls by Anton Potapov · 1 year ago
  35. 8bad752 Fixing DatabaseUtils to detect malformed UTF-16 strings by Kunal Malhotra · 1 year, 2 months ago
  36. cca6aca Disallow loading icon from content URI to PipMenu by Hongwei Wang · 1 year, 2 months ago
  37. 0909dc2 [DO NOT MERGE] Verify URI Permissions in Autofill RemoteViews by Tim Yu · 1 year, 1 month ago
  38. a20a075 Do not share key mappings with JNI object by Josep del Rio · 1 year, 1 month ago
  39. 1a47e38 Verify URI permissions for EXTRA_REMOTE_INPUT_HISTORY_ITEMS. by Ioana Alexandru · 1 year, 2 months ago
  40. d5470c9 Import translations. DO NOT MERGE ANYWHERE by Bill Yi · 1 year, 1 month ago
  41. a934acd RingtoneManager: verify default ringtone is audio by Jean-Michel Trivi · 1 year, 8 months ago
  42. 22c22a2 Merge cherrypicks of ['googleplex-android-review.googlesource.com/20341111', 'googleplex-android-review.googlesource.com/23516871', 'googleplex-android-review.googlesource.com/23477773', 'googleplex-android-review.googlesource.com/23709052', 'googleplex-android-review.googlesource.com/23905843', 'googleplex-android-review.googlesource.com/23883016', 'googleplex-android-review.googlesource.com/23861644'] into security-aosp-sc-release. by Android Build Coastguard Worker · 1 year ago android-security-12.0.0_r51
  43. 8538ea1c Improve user handling when querying for resumable media by Beth Thibodeau · 1 year, 1 month ago
  44. 9d4a401 Update AccountManagerService checkKeyIntentParceledCorrectly. by Dmitry Dementyev · 1 year, 1 month ago
  45. 54959a7 Forbid granting access to NLSes with too-long component names by Matías Hernández · 1 year, 1 month ago
  46. 412d9b6 Ignore virtual presentation windows - RESTRICT AUTOMERGE by Achim Thesmann · 1 year, 2 months ago
  47. 14da8e7 [DO NOT MERGE] Update quickshare intent rather than recreating by Miranda Kephart · 1 year, 3 months ago
  48. 5caa51d1 DO NOT MERGE Grant carrier privileges if package has carrier config access. by Aishwarya Mallampati · 1 year, 9 months ago
  49. 7a8d3e3 Merge cherrypicks of ['googleplex-android-review.googlesource.com/23891747'] into security-aosp-sc-release. by Android Build Coastguard Worker · 1 year ago
  50. fc5ead8 DO NOT MERGE Revert "Verify URI permissions for EXTRA_REMOTE_INPUT_HISTORY_ITEMS." by Ioana Alexandru · 1 year, 1 month ago
  51. 2d3bf39 Merge cherrypicks of ['googleplex-android-review.googlesource.com/20312179', 'googleplex-android-review.googlesource.com/22915959', 'googleplex-android-review.googlesource.com/22599577', 'googleplex-android-review.googlesource.com/22894946', 'googleplex-android-review.googlesource.com/23033896', 'googleplex-android-review.googlesource.com/23089588', 'googleplex-android-review.googlesource.com/23331796', 'googleplex-android-review.googlesource.com/23410117', 'googleplex-android-review.googlesource.com/23210299', 'googleplex-android-review.googlesource.com/23352460', 'googleplex-android-review.googlesource.com/23429137', 'googleplex-android-review.googlesource.com/23386456', 'googleplex-android-review.googlesource.com/23430378', 'googleplex-android-review.googlesource.com/23542103', 'googleplex-android-review.googlesource.com/23436009', 'googleplex-android-review.googlesource.com/23517939', 'googleplex-android-review.googlesource.com/23592330'] into security-aosp-sc-release. by Android Build Coastguard Worker · 1 year, 1 month ago android-security-12.0.0_r50
  52. 44004ea Merge "Resolve StatusHints image exploit across user." into rvc-dev am: 543e6febbf am: 8c3d465b5e by Pranav Madapurmath · 1 year, 2 months ago
  53. b639bf9 Verify URI permissions in MediaMetadata by Michael Mikhail · 1 year, 3 months ago
  54. 8208665 Remove unnecessary padding code by Lee Shombert · 1 year, 2 months ago
  55. ec2c956 Merge "Use Settings.System.getIntForUser instead of getInt to make sure user specific settings are used" into rvc-dev am: d198f5165c am: 886d492c8c by Treehugger Robot · 1 year, 2 months ago
  56. a458349 Visit URIs in themed remoteviews icons. by Ioana Alexandru · 1 year, 2 months ago
  57. f2dcaa7 Fix PrivacyChip not visible issue by Johannes Gallmann · 1 year, 2 months ago
  58. db5bc7b Check URIs in sized remote views. by Ioana Alexandru · 1 year, 2 months ago
  59. 662c503 Validate ComponentName for MediaButtonBroadcastReceiver by Iván Budnik · 1 year, 4 months ago
  60. c452644 Implement visitUris for RemoteViews ViewGroupActionAdd. by Ioana Alexandru · 1 year, 2 months ago
  61. 8b8f85c Check URIs in notification public version. by Ioana Alexandru · 1 year, 2 months ago
  62. 8ae9d48 Preserve flags for non-runtime permissions upon package update. by Hai Zhang · 1 year, 2 months ago
  63. f88afd1 On device lockdown, always show the keyguard by Beverly · 1 year, 2 months ago
  64. b3b9f6d Ensure policy has no absurdly long strings by Pavel Grafov · 1 year, 4 months ago
  65. 350b840 Verify URI permissions for notification shortcutIcon. by Ioana Alexandru · 1 year, 3 months ago
  66. ec3547b Do not load drawable for wallet card if the card image icon iscreated by Silin Huang · 1 year, 3 months ago
  67. b7886f3 ActivityManagerService: Allow openContentUri from vendor/system/product. by Austin Borger · 1 year, 4 months ago
  68. 5f446d2 DO NOT MERGE: ActivityManager#killBackgroundProcesses can kill caller's own app only by Jing Ji · 1 year, 9 months ago
  69. 5c817d3 Merge cherrypicks of ['googleplex-android-review.googlesource.com/20219552', 'googleplex-android-review.googlesource.com/20946190', 'googleplex-android-review.googlesource.com/20460002', 'googleplex-android-review.googlesource.com/22390145', 'googleplex-android-review.googlesource.com/22616881', 'googleplex-android-review.googlesource.com/21327525', 'googleplex-android-review.googlesource.com/22621774', 'googleplex-android-review.googlesource.com/22787457', 'googleplex-android-review.googlesource.com/22905557', 'googleplex-android-review.googlesource.com/22895638'] into security-aosp-sc-release. by Android Build Coastguard Worker · 1 year, 2 months ago android-security-12.0.0_r49
  70. 8ad6cab Visit URIs in landscape/portrait custom remote views. by Ioana Alexandru · 1 year, 3 months ago
  71. bfbc4b6 Truncate ShortcutInfo Id by András Kurucz · 1 year, 3 months ago
  72. f2d7a8d Verify URI permissions for EXTRA_REMOTE_INPUT_HISTORY_ITEMS. by Ioana Alexandru · 1 year, 3 months ago
  73. 1707468a Dismiss keyguard when simpin auth'd and... by Aaron Liu · 1 year, 4 months ago
  74. 6df4d81 Only allow NEW_TASK flag when adjusting pending intents by Winson Chung · 1 year, 5 months ago
  75. 9399ed3 Grant URI permissions to the CallStyle-related ones by Matías Hernández · 1 year, 3 months ago
  76. b8fc299 Limit the number of supported v1 and v2 signers by Michael Groover · 1 year, 4 months ago
  77. 7673555 Sanitize VPN label to prevent HTML injection by Lucas Lin · 1 year, 5 months ago
  78. d276d26 Revert "Ensure that only SysUI can override pending intent launch flags" by Winson Chung · 1 year, 6 months ago
  79. 5a83ccf3 Ensure that only SysUI can override pending intent launch flags by Winson Chung · 1 year, 9 months ago
  80. ea21190 Merge cherrypicks of ['googleplex-android-review.googlesource.com/21564420', 'googleplex-android-review.googlesource.com/21610895', 'googleplex-android-review.googlesource.com/22096945', 'googleplex-android-review.googlesource.com/22142967', 'googleplex-android-review.googlesource.com/21614620', 'googleplex-android-review.googlesource.com/20026091', 'googleplex-android-review.googlesource.com/22291002', 'googleplex-android-review.googlesource.com/22311042', 'googleplex-android-review.googlesource.com/22312923', 'googleplex-android-review.googlesource.com/21801858'] into security-aosp-sc-release. by Android Build Coastguard Worker · 1 year, 4 months ago android-security-12.0.0_r48
  81. 4ea4790 Prevent sharesheet from previewing unowned URIs by Mark Renouf · 1 year, 5 months ago
  82. ab5a0f9 [RESTRICT AUTOMERGE] Add BubbleMetadata detection to block FSI by Jeff DeCew · 1 year, 4 months ago
  83. a3dbe8e Enforce DevicePolicyManager.setUserControlDisabledPackages in AppStandbyController by Alex Johnston · 1 year, 4 months ago
  84. 65d8563 Allow filtering of services by Julia Reynolds · 1 year, 4 months ago
  85. 5bf78f5 Handle invalid data during job loading. by Kweku Adams · 1 year, 10 months ago
  86. d419c58 Check key intent for selectors and prohibited flags by Brian Lee · 1 year, 5 months ago
  87. ac8b509 Grant MANAGE_USERS access to Traceur by Kevin Jeon · 1 year, 4 months ago
  88. da0a3a64 [DO NOT MERGE] Prevent RemoteViews crashing SystemUi by Valentin Iftime · 1 year, 5 months ago
  89. ff87492 [DO NOT MERGE] Wait for preloading images to complete before inflating notifications by Valentin Iftime · 1 year, 5 months ago
  90. 98be18d Remove Activity if it enters PiP without window by Hongwei Wang · 1 year, 5 months ago
  91. 11fc2a4 Merge cherrypicks of ['googleplex-android-review.googlesource.com/18029563', 'googleplex-android-review.googlesource.com/21160027', 'googleplex-android-review.googlesource.com/21266989', 'googleplex-android-review.googlesource.com/21238189', 'googleplex-android-review.googlesource.com/21373610', 'googleplex-android-review.googlesource.com/21183615', 'googleplex-android-review.googlesource.com/21655734', 'googleplex-android-review.googlesource.com/21611508', 'googleplex-android-review.googlesource.com/21740239', 'googleplex-android-review.googlesource.com/21574889', 'googleplex-android-review.googlesource.com/21801858'] into security-aosp-sc-release. by Android Build Coastguard Worker · 1 year, 4 months ago android-security-12.0.0_r47
  92. 6843d15 Limit the number of shortcuts per app that can be retained by system by Pinyao Ting · 1 year, 5 months ago
  93. 304d3f4 Trim strings added to persistent snoozed notification storage. by Ioana Alexandru · 1 year, 7 months ago
  94. 11e7509 Make Activites touch opaque - DO NOT MERGE by Linus Tufvesson · 1 year, 5 months ago
  95. 344b108 Revert "Make Activites touch opaque - DO NOT MERGE" by Justin Dunlap · 1 year, 5 months ago
  96. 702cbce enforce stricter rules when registering phoneAccounts by Thomas Stuart · 1 year, 8 months ago
  97. 3dfbbae Uri: check authority and scheme as part of determining URI path by Orion Hodson · 2 years, 3 months ago
  98. 6b5d07d Checks if AccessibilityServiceInfo is within parcelable size. by Daniel Norman · 1 year, 5 months ago
  99. c2255f2 [RESTRICT AUTOMERGE][pm] still allow debuggable for system app downgrades by Songchun Fan · 1 year, 6 months ago
  100. 747c357 [RESTRICT AUTOMERGE][pm] prevent system app downgrades of versions lower than preload by Songchun Fan · 1 year, 6 months ago