{"payload":{"feedbackUrl":"https://github.com/orgs/community/discussions/53140","repo":{"id":294702909,"defaultBranch":"ads-7.1.0","name":"services_telephony","ownerLogin":"AndDiSa","currentUserCanPush":false,"isFork":false,"isEmpty":false,"createdAt":"2020-09-11T13:29:08.000Z","ownerAvatar":"https://avatars.githubusercontent.com/u/550244?v=4","public":true,"private":false,"isOrgOwned":false},"refInfo":{"name":"","listCacheKey":"v0:1599831013.0","currentOid":""},"activityList":{"items":[{"before":"6c1322512ec4192ab5c0174d475b6c4c2ee25d0d","after":"8f60b446429e4bd6d5fe09b1ca9081c3546545bd","ref":"refs/heads/ads-7.1.0","pushedAt":"2023-11-21T19:09:20.000Z","pushType":"force_push","commitsCount":0,"pusher":{"login":"AndDiSa","name":null,"path":"/AndDiSa","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/550244?s=80&v=4"},"commit":{"message":"fix merge issues","shortMessageHtmlLink":"fix merge issues"}},{"before":"8f60b446429e4bd6d5fe09b1ca9081c3546545bd","after":"6c1322512ec4192ab5c0174d475b6c4c2ee25d0d","ref":"refs/heads/ads-7.1.0","pushedAt":"2023-11-04T09:22:42.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"AndDiSa","name":null,"path":"/AndDiSa","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/550244?s=80&v=4"},"commit":{"message":"Fixed leak of cross user data in multiple settings.\n\n  - Any app is allowed to receive GET_CONTENT intent. Using this, an user puts back in the intent an uri with data of another user.\n  - Telephony service has INTERACT_ACROSS_USER permission. Using this, it reads and shows the deta to the evil user.\n\nFix: When telephony service gets the intent result, it checks if the uri is from the current user or not.\n\nBug: b/256591023 , b/256819787\n\nTest: The malicious behaviour was not being reproduced. Unable to import contact from other users data.\nTest2: Able to import contact from the primary user or uri with no user id\n(These settings are not available for secondary users)\n(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:ab593467e900d4a6d25a34024a06195ae863f6dc)\nMerged-In: I1e3a643f17948153aecc1d0df9ffd9619ad678c1\nChange-Id: I1e3a643f17948153aecc1d0df9ffd9619ad678c1\n\nChange-Id: I01cf83cc40bbf13497bc6c90f949f5bb62a833d7","shortMessageHtmlLink":"Fixed leak of cross user data in multiple settings."}},{"before":"bfebd91a075a6959b51ad35f78c0f00124bdf1f8","after":"8f60b446429e4bd6d5fe09b1ca9081c3546545bd","ref":"refs/heads/ads-7.1.0","pushedAt":"2023-04-18T18:16:31.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"AndDiSa","name":null,"path":"/AndDiSa","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/550244?s=80&v=4"},"commit":{"message":"fix merge issues","shortMessageHtmlLink":"fix merge issues"}}],"hasNextPage":false,"hasPreviousPage":false,"activityType":"all","actor":null,"timePeriod":"all","sort":"DESC","perPage":30,"cursor":"djE6ks8AAAADtJMVBAA","startCursor":null,"endCursor":null}},"title":"Activity · AndDiSa/services_telephony"}