From 98febfd3ec0ce67ae61cb086a2f3573a62582055 Mon Sep 17 00:00:00 2001 From: Fabian Kozynski Date: Mon, 25 Mar 2019 13:30:35 -0400 Subject: [PATCH] Clarified docs for ACTION_QS_TILE_PREFERENCES SystemUI is the process launching the intent, so it can launch activities that are not exported. This documents how to protect activities from being launched by other uid. Test: no test Fixes: 80284344 Change-Id: Iaad0107a071ece50cb14571859e7b01e500d6051 --- core/java/android/service/quicksettings/TileService.java | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/core/java/android/service/quicksettings/TileService.java b/core/java/android/service/quicksettings/TileService.java index c35423fb09c61..d32bdad4d0a92 100644 --- a/core/java/android/service/quicksettings/TileService.java +++ b/core/java/android/service/quicksettings/TileService.java @@ -87,6 +87,10 @@ public class TileService extends Service { * This intent may also define a {@link Intent#EXTRA_COMPONENT_NAME} value * to indicate the {@link ComponentName} that caused the preferences to be * opened. + *

+ * To ensure that the activity can only be launched through quick settings + * UI provided by this service, apps can protect it with the + * BIND_QUICK_SETTINGS_TILE permission. */ @SdkConstant(SdkConstantType.INTENT_CATEGORY) public static final String ACTION_QS_TILE_PREFERENCES