From 1bcb43fc2878b4421dce41459d7e21685ac11ac7 Mon Sep 17 00:00:00 2001 From: Phil Weaver Date: Thu, 4 May 2017 17:07:54 -0700 Subject: [PATCH] Remove outdated security note from A11yEvent The note that passwords are hidden from a11y services has led to researchers demonstrating the many ways that they can be scraped. Remove the security note so we aren't making a promise that we can't keep. Bug: 38004070 Test: Comment change only, so relying on TH Change-Id: I257f282aba7542af7543b96eb09b4f898b1a3f06 --- .../android/view/accessibility/AccessibilityEvent.java | 7 ------- 1 file changed, 7 deletions(-) diff --git a/core/java/android/view/accessibility/AccessibilityEvent.java b/core/java/android/view/accessibility/AccessibilityEvent.java index f8a13a373aecc..71c4b33c46908 100644 --- a/core/java/android/view/accessibility/AccessibilityEvent.java +++ b/core/java/android/view/accessibility/AccessibilityEvent.java @@ -529,13 +529,6 @@ import java.util.List; *
  • {@link #isEnabled()} - Whether the source is enabled.
  • * *

    - *

    - * Security note - *

    - * Since an event contains the text of its source privacy can be compromised by leaking - * sensitive information such as passwords. To address this issue any event fired in response - * to manipulation of a PASSWORD field does NOT CONTAIN the text of the password. - *

    * * @see android.view.accessibility.AccessibilityManager * @see android.accessibilityservice.AccessibilityService