From 54d442193b2d999039c7ee414d08267e7c25c5cf Mon Sep 17 00:00:00 2001
From: Wilson Wu <wilsonwu@google.com>
Date: Wed, 10 Aug 2022 14:46:45 +0800
Subject: Make DownloadOverMeteredDialog not exported

The DownloadOverMeteredDialog is exported which may
allow a app to prompt this dialog to ask the user to
download dictionary.

Since the app can control the download dictionary size
and may show an incorrect size for user to make security
concern. Make the activity not exported for apps to launch.

Bug: 236688064
Test: Manual test as follow steps:
      1. lunch aosp_bramble-userdebug and flash
      2. Verify the AOSP keyboard work properly
      3. Launch the PoC test app
      4. Verify the DownloadOverMeteredDialog cannot be launched
Change-Id: I9be92ba2813e7aaad0ef10555f585c5c8a25361f
---
 java/AndroidManifest.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'java/AndroidManifest.xml')

diff --git a/java/AndroidManifest.xml b/java/AndroidManifest.xml
index ac84c3388..3917084a4 100644
--- a/java/AndroidManifest.xml
+++ b/java/AndroidManifest.xml
@@ -149,7 +149,7 @@
         <activity android:name="com.android.inputmethod.dictionarypack.DownloadOverMeteredDialog"
              android:theme="@style/platformActivityTheme"
              android:label="@string/dictionary_install_over_metered_network_prompt"
-             android:exported="true">
+             android:exported="false">
             <intent-filter>
                 <action android:name="android.intent.action.MAIN"/>
             </intent-filter>
-- 
cgit v1.2.3-83-g751a