)]}'
{"id":"LineageOS%2Fandroid_packages_apps_ManagedProvisioning~432696","triplet_id":"LineageOS%2Fandroid_packages_apps_ManagedProvisioning~lineage-20.0~I4c5ab64cb770c61db1cedc5169a4b8cdf0a4b0bd","project":"LineageOS/android_packages_apps_ManagedProvisioning","branch":"lineage-20.0","topic":"T_asb_2025-06","hashtags":[],"change_id":"I4c5ab64cb770c61db1cedc5169a4b8cdf0a4b0bd","subject":"Fix confused deputy vulnerability in termsActivity to access terms_disclaimer Uri only if the calling app has the permissions","status":"MERGED","created":"2025-06-08 12:46:32.000000000","updated":"2025-06-11 12:08:10.000000000","submitted":"2025-06-11 12:08:10.000000000","submitter":{"_account_id":15173,"name":"Kevin Haggerty","email":"haggertk@lineageos.org","username":"haggertk","avatars":[{"url":"https://www.gravatar.com/avatar/258edfac858c1ce5f056ed4ca050a578.jpg?d\u003didenticon\u0026r\u003dpg\u0026s\u003d32","height":32},{"url":"https://www.gravatar.com/avatar/258edfac858c1ce5f056ed4ca050a578.jpg?d\u003didenticon\u0026r\u003dpg\u0026s\u003d56","height":56},{"url":"https://www.gravatar.com/avatar/258edfac858c1ce5f056ed4ca050a578.jpg?d\u003didenticon\u0026r\u003dpg\u0026s\u003d100","height":100},{"url":"https://www.gravatar.com/avatar/258edfac858c1ce5f056ed4ca050a578.jpg?d\u003didenticon\u0026r\u003dpg\u0026s\u003d120","height":120}]},"total_comment_count":0,"unresolved_comment_count":0,"has_review_started":true,"submission_id":"432695-T_asb_2025-06","meta_rev_id":"78f6b63b6c6189e584406ec9ec0e30367521d49a","_number":432696,"virtual_id_number":432696,"owner":{"_account_id":15173,"name":"Kevin Haggerty","email":"haggertk@lineageos.org","username":"haggertk","avatars":[{"url":"https://www.gravatar.com/avatar/258edfac858c1ce5f056ed4ca050a578.jpg?d\u003didenticon\u0026r\u003dpg\u0026s\u003d32","height":32},{"url":"https://www.gravatar.com/avatar/258edfac858c1ce5f056ed4ca050a578.jpg?d\u003didenticon\u0026r\u003dpg\u0026s\u003d56","height":56},{"url":"https://www.gravatar.com/avatar/258edfac858c1ce5f056ed4ca050a578.jpg?d\u003didenticon\u0026r\u003dpg\u0026s\u003d100","height":100},{"url":"https://www.gravatar.com/avatar/258edfac858c1ce5f056ed4ca050a578.jpg?d\u003didenticon\u0026r\u003dpg\u0026s\u003d120","height":120}]},"actions":{},"labels":{"Verified":{"all":[{"value":0,"_account_id":15173,"name":"Kevin Haggerty","email":"haggertk@lineageos.org","username":"haggertk","avatars":[{"url":"https://www.gravatar.com/avatar/258edfac858c1ce5f056ed4ca050a578.jpg?d\u003didenticon\u0026r\u003dpg\u0026s\u003d32","height":32},{"url":"https://www.gravatar.com/avatar/258edfac858c1ce5f056ed4ca050a578.jpg?d\u003didenticon\u0026r\u003dpg\u0026s\u003d56","height":56},{"url":"https://www.gravatar.com/avatar/258edfac858c1ce5f056ed4ca050a578.jpg?d\u003didenticon\u0026r\u003dpg\u0026s\u003d100","height":100},{"url":"https://www.gravatar.com/avatar/258edfac858c1ce5f056ed4ca050a578.jpg?d\u003didenticon\u0026r\u003dpg\u0026s\u003d120","height":120}]}],"values":{"-1":"Fails"," 0":"No score","+1":"Verified"},"description":"","default_value":0},"Code-Review":{"all":[{"value":0,"_account_id":15173,"name":"Kevin Haggerty","email":"haggertk@lineageos.org","username":"haggertk","avatars":[{"url":"https://www.gravatar.com/avatar/258edfac858c1ce5f056ed4ca050a578.jpg?d\u003didenticon\u0026r\u003dpg\u0026s\u003d32","height":32},{"url":"https://www.gravatar.com/avatar/258edfac858c1ce5f056ed4ca050a578.jpg?d\u003didenticon\u0026r\u003dpg\u0026s\u003d56","height":56},{"url":"https://www.gravatar.com/avatar/258edfac858c1ce5f056ed4ca050a578.jpg?d\u003didenticon\u0026r\u003dpg\u0026s\u003d100","height":100},{"url":"https://www.gravatar.com/avatar/258edfac858c1ce5f056ed4ca050a578.jpg?d\u003didenticon\u0026r\u003dpg\u0026s\u003d120","height":120}]}],"values":{"-2":"Do not submit","-1":"I would prefer that you didn\u0027t submit this"," 0":"No score","+1":"Looks good to me, but someone else must approve","+2":"Looks good to me, approved"},"description":"","default_value":0},"CI":{"all":[{"value":0,"_account_id":15173,"name":"Kevin Haggerty","email":"haggertk@lineageos.org","username":"haggertk","avatars":[{"url":"https://www.gravatar.com/avatar/258edfac858c1ce5f056ed4ca050a578.jpg?d\u003didenticon\u0026r\u003dpg\u0026s\u003d32","height":32},{"url":"https://www.gravatar.com/avatar/258edfac858c1ce5f056ed4ca050a578.jpg?d\u003didenticon\u0026r\u003dpg\u0026s\u003d56","height":56},{"url":"https://www.gravatar.com/avatar/258edfac858c1ce5f056ed4ca050a578.jpg?d\u003didenticon\u0026r\u003dpg\u0026s\u003d100","height":100},{"url":"https://www.gravatar.com/avatar/258edfac858c1ce5f056ed4ca050a578.jpg?d\u003didenticon\u0026r\u003dpg\u0026s\u003d120","height":120}]}],"values":{"-1":"Fail"," 0":"No score","+1":"Pass"},"description":"","default_value":0,"optional":true}},"removable_reviewers":[],"reviewers":{},"pending_reviewers":{},"reviewer_updates":[],"messages":[{"id":"59cdd01c1a81b549a5f16c5ca48852d695d10027","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":15173,"name":"Kevin Haggerty","email":"haggertk@lineageos.org","username":"haggertk","avatars":[{"url":"https://www.gravatar.com/avatar/258edfac858c1ce5f056ed4ca050a578.jpg?d\u003didenticon\u0026r\u003dpg\u0026s\u003d32","height":32},{"url":"https://www.gravatar.com/avatar/258edfac858c1ce5f056ed4ca050a578.jpg?d\u003didenticon\u0026r\u003dpg\u0026s\u003d56","height":56},{"url":"https://www.gravatar.com/avatar/258edfac858c1ce5f056ed4ca050a578.jpg?d\u003didenticon\u0026r\u003dpg\u0026s\u003d100","height":100},{"url":"https://www.gravatar.com/avatar/258edfac858c1ce5f056ed4ca050a578.jpg?d\u003didenticon\u0026r\u003dpg\u0026s\u003d120","height":120}]},"date":"2025-06-08 12:46:32.000000000","message":"Uploaded patch set 1.","accounts_in_message":[],"_revision_number":1},{"id":"78f6b63b6c6189e584406ec9ec0e30367521d49a","tag":"autogenerated:gerrit:merged","author":{"_account_id":15173,"name":"Kevin Haggerty","email":"haggertk@lineageos.org","username":"haggertk","avatars":[{"url":"https://www.gravatar.com/avatar/258edfac858c1ce5f056ed4ca050a578.jpg?d\u003didenticon\u0026r\u003dpg\u0026s\u003d32","height":32},{"url":"https://www.gravatar.com/avatar/258edfac858c1ce5f056ed4ca050a578.jpg?d\u003didenticon\u0026r\u003dpg\u0026s\u003d56","height":56},{"url":"https://www.gravatar.com/avatar/258edfac858c1ce5f056ed4ca050a578.jpg?d\u003didenticon\u0026r\u003dpg\u0026s\u003d100","height":100},{"url":"https://www.gravatar.com/avatar/258edfac858c1ce5f056ed4ca050a578.jpg?d\u003didenticon\u0026r\u003dpg\u0026s\u003d120","height":120}]},"date":"2025-06-11 12:08:10.000000000","message":"Change has been successfully pushed.","accounts_in_message":[],"_revision_number":2}],"current_revision_number":2,"current_revision":"9e633e910d6c7b9781ea94a31adb0caf9ff6d034","revisions":{"d61e36757044d871f0bcd5eff90fa148c1d2dc9c":{"kind":"REWORK","_number":1,"created":"2025-06-08 12:46:32.000000000","uploader":{"_account_id":15173,"name":"Kevin Haggerty","email":"haggertk@lineageos.org","username":"haggertk","avatars":[{"url":"https://www.gravatar.com/avatar/258edfac858c1ce5f056ed4ca050a578.jpg?d\u003didenticon\u0026r\u003dpg\u0026s\u003d32","height":32},{"url":"https://www.gravatar.com/avatar/258edfac858c1ce5f056ed4ca050a578.jpg?d\u003didenticon\u0026r\u003dpg\u0026s\u003d56","height":56},{"url":"https://www.gravatar.com/avatar/258edfac858c1ce5f056ed4ca050a578.jpg?d\u003didenticon\u0026r\u003dpg\u0026s\u003d100","height":100},{"url":"https://www.gravatar.com/avatar/258edfac858c1ce5f056ed4ca050a578.jpg?d\u003didenticon\u0026r\u003dpg\u0026s\u003d120","height":120}]},"ref":"refs/changes/96/432696/1","fetch":{"anonymous http":{"url":"https://github.com/LineageOS/android_packages_apps_ManagedProvisioning","ref":"refs/changes/96/432696/1","commands":{"Branch":"git fetch https://github.com/LineageOS/android_packages_apps_ManagedProvisioning refs/changes/96/432696/1 \u0026\u0026 git checkout -b change-432696 FETCH_HEAD","Checkout":"git fetch https://github.com/LineageOS/android_packages_apps_ManagedProvisioning refs/changes/96/432696/1 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://github.com/LineageOS/android_packages_apps_ManagedProvisioning refs/changes/96/432696/1 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://github.com/LineageOS/android_packages_apps_ManagedProvisioning refs/changes/96/432696/1 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://github.com/LineageOS/android_packages_apps_ManagedProvisioning refs/changes/96/432696/1","Reset To":"git fetch https://github.com/LineageOS/android_packages_apps_ManagedProvisioning refs/changes/96/432696/1 \u0026\u0026 git reset --hard FETCH_HEAD"}}},"commit":{"parents":[{"commit":"c3657bc50c4ee2c05967fb02882f84dcbf5fc2ad","subject":"Remove invalid URLs in terms activity","web_links":[{"name":"GitHub","tooltip":"Open in GitWeb","url":"https://github.com/LineageOS/android_packages_apps_ManagedProvisioning/commit/c3657bc50c4ee2c05967fb02882f84dcbf5fc2ad"}]}],"author":{"name":"Shreya Singh","email":"shreyacsingh@google.com","date":"2025-03-08 00:15:57.000000000","tz":-480},"committer":{"name":"Kevin F. Haggerty","email":"haggertk@lineageos.org","date":"2025-06-08 11:53:29.000000000","tz":-360},"subject":"Fix confused deputy vulnerability in termsActivity to access terms_disclaimer Uri only if the calling app has the permissions","message":"Fix confused deputy vulnerability in termsActivity to access terms_disclaimer Uri only if the calling app has the permissions\n\n1-P doc at: go/termsDisclaimerVulnerability\n\nBefore: https://hsv.googleplex.com/5163551739084800\nAfter: https://hsv.googleplex.com/5207829722955776\nhttps://paste.googleplex.com/5643054726512640\n\nFlag: EXEMPT bug fix\nBug: 368319929\nTest: Manual using test app provided by the reporter\n(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:5d67902f6a7498d016ee588d6c00710fb2d3ab98)\n(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:aa06d04116f86ef4e026fbc907c41dfe87722e1e)\nMerged-In: I4c5ab64cb770c61db1cedc5169a4b8cdf0a4b0bd\nChange-Id: I4c5ab64cb770c61db1cedc5169a4b8cdf0a4b0bd\n","web_links":[{"name":"GitHub","tooltip":"Open in GitWeb","url":"https://github.com/LineageOS/android_packages_apps_ManagedProvisioning/commit/d61e36757044d871f0bcd5eff90fa148c1d2dc9c"}],"resolve_conflicts_web_links":[{"name":"GitHub","tooltip":"Open in GitWeb","url":"https://github.com/LineageOS/android_packages_apps_ManagedProvisioning/commit/d61e36757044d871f0bcd5eff90fa148c1d2dc9c"}]},"branch":"refs/heads/lineage-20.0"},"9e633e910d6c7b9781ea94a31adb0caf9ff6d034":{"kind":"TRIVIAL_REBASE","_number":2,"created":"2025-06-11 12:08:10.000000000","uploader":{"_account_id":15173,"name":"Kevin Haggerty","email":"haggertk@lineageos.org","username":"haggertk","avatars":[{"url":"https://www.gravatar.com/avatar/258edfac858c1ce5f056ed4ca050a578.jpg?d\u003didenticon\u0026r\u003dpg\u0026s\u003d32","height":32},{"url":"https://www.gravatar.com/avatar/258edfac858c1ce5f056ed4ca050a578.jpg?d\u003didenticon\u0026r\u003dpg\u0026s\u003d56","height":56},{"url":"https://www.gravatar.com/avatar/258edfac858c1ce5f056ed4ca050a578.jpg?d\u003didenticon\u0026r\u003dpg\u0026s\u003d100","height":100},{"url":"https://www.gravatar.com/avatar/258edfac858c1ce5f056ed4ca050a578.jpg?d\u003didenticon\u0026r\u003dpg\u0026s\u003d120","height":120}]},"ref":"refs/changes/96/432696/2","fetch":{"anonymous http":{"url":"https://github.com/LineageOS/android_packages_apps_ManagedProvisioning","ref":"refs/changes/96/432696/2","commands":{"Branch":"git fetch https://github.com/LineageOS/android_packages_apps_ManagedProvisioning refs/changes/96/432696/2 \u0026\u0026 git checkout -b change-432696 FETCH_HEAD","Checkout":"git fetch https://github.com/LineageOS/android_packages_apps_ManagedProvisioning refs/changes/96/432696/2 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://github.com/LineageOS/android_packages_apps_ManagedProvisioning refs/changes/96/432696/2 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://github.com/LineageOS/android_packages_apps_ManagedProvisioning refs/changes/96/432696/2 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://github.com/LineageOS/android_packages_apps_ManagedProvisioning refs/changes/96/432696/2","Reset To":"git fetch https://github.com/LineageOS/android_packages_apps_ManagedProvisioning refs/changes/96/432696/2 \u0026\u0026 git reset --hard FETCH_HEAD"}}},"commit":{"parents":[{"commit":"7e72425a7b563c729042183a6b962f053dd33576","subject":"Remove invalid URLs in terms activity","web_links":[{"name":"GitHub","tooltip":"Open in GitWeb","url":"https://github.com/LineageOS/android_packages_apps_ManagedProvisioning/commit/7e72425a7b563c729042183a6b962f053dd33576"}]}],"author":{"name":"Shreya Singh","email":"shreyacsingh@google.com","date":"2025-03-08 00:15:57.000000000","tz":-480},"committer":{"name":"Android Build Coastguard Worker","email":"android-build-coastguard-worker@google.com","date":"2025-04-09 22:18:08.000000000","tz":-420},"subject":"Fix confused deputy vulnerability in termsActivity to access terms_disclaimer Uri only if the calling app has the permissions","message":"Fix confused deputy vulnerability in termsActivity to access terms_disclaimer Uri only if the calling app has the permissions\n\n1-P doc at: go/termsDisclaimerVulnerability\n\nBefore: https://hsv.googleplex.com/5163551739084800\nAfter: https://hsv.googleplex.com/5207829722955776\nhttps://paste.googleplex.com/5643054726512640\n\nFlag: EXEMPT bug fix\nBug: 368319929\nTest: Manual using test app provided by the reporter\n(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:5d67902f6a7498d016ee588d6c00710fb2d3ab98)\n(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:aa06d04116f86ef4e026fbc907c41dfe87722e1e)\nMerged-In: I4c5ab64cb770c61db1cedc5169a4b8cdf0a4b0bd\nChange-Id: I4c5ab64cb770c61db1cedc5169a4b8cdf0a4b0bd\n","web_links":[{"name":"GitHub","tooltip":"Open in GitWeb","url":"https://github.com/LineageOS/android_packages_apps_ManagedProvisioning/commit/9e633e910d6c7b9781ea94a31adb0caf9ff6d034"}],"resolve_conflicts_web_links":[{"name":"GitHub","tooltip":"Open in GitWeb","url":"https://github.com/LineageOS/android_packages_apps_ManagedProvisioning/commit/9e633e910d6c7b9781ea94a31adb0caf9ff6d034"}]},"branch":"refs/heads/lineage-20.0"}},"requirements":[],"submit_records":[],"submit_requirements":[]}