| commit | 790ac852b365ab77a895da9b48f925caf8fde729 | [log] [tgz] |
|---|---|---|
| author | Tom Taylor <tomtaylor@google.com> | Tue Oct 14 13:38:17 2014 -0700 |
| committer | Tom Taylor <tomtaylor@google.com> | Tue Oct 14 21:45:22 2014 +0000 |
| tree | 8af4d58c241e6601d1a1c4e089a3cfef07f9bdc1 | |
| parent | 4f89e3b215c731a34b3ab8c300539f96e3f22459 [diff] |
Externally Reported Moderate Security Issue: SQL Injection in WAPPushManager Bug 17969135 Use query (instead of rawQuery) and pass in arguments instead of building the query with a giant string. Add a unit test that fails with the old code but passes with the new code. Change-Id: Id04a1db6fb95fcd923e1f36f5ab3b94402590918