diff --git a/core/java/android/app/assist/AssistStructure.java b/core/java/android/app/assist/AssistStructure.java index 55c22de59f7d6..c208f1dbba8a3 100644 --- a/core/java/android/app/assist/AssistStructure.java +++ b/core/java/android/app/assist/AssistStructure.java @@ -1260,12 +1260,12 @@ public class AssistStructure implements Parcelable { *
Typically used when the view associated with the view is a container for an HTML * document. * - * WARNING: a {@link android.service.autofill.AutofillService} should only - * use this domain for autofill purposes when it trusts the app generating it (i.e., the app - * defined by {@link AssistStructure#getActivityComponent()}). + *
Warning: an autofill service cannot trust the value reported by this method + * without verifing its authenticity—see the "Web security" section of + * {@link android.service.autofill.AutofillService} for more details. * * @return domain-only part of the document. For example, if the full URL is - * {@code http://my.site/login?user=my_user}, it returns {@code my.site}. + * {@code https://my.site/login?user=my_user}, it returns {@code my.site}. */ @Nullable public String getWebDomain() { return mWebDomain;