commit 8eec0c723d2ae4bb6c08efe937e624cc9cd69d48
author Felipe Leme <felipeal@google.com> Fri Sep 29 18:40:34 2017 +0000
committer android-build-merger <android-build-merger@google.com> Fri Sep 29 18:40:34 2017 +0000
tree 34520fae6bc65d77d46ed8fe551332a247a7a4e6
parent c5ee4f456937fc2c8274e0ca10aeda58d9f3b0d8
parent 256c2822f541f2e408d541c0b860573df47c4149

Merge "Fixed warning on getWebDomain()" into oc-mr1-dev
am: 256c2822f5

Change-Id: I4279400bd5a5ab441961942782054d5e810235c4

core/java/android/app/assist/AssistStructure.java

diff --git a/core/java/android/app/assist/AssistStructure.java b/core/java/android/app/assist/AssistStructure.java
index 55c22de..c208f1d 100644
--- a/core/java/android/app/assist/AssistStructure.java
+++ b/core/java/android/app/assist/AssistStructure.java
@@ -1260,12 +1260,12 @@
          * <p>Typically used when the view associated with the view is a container for an HTML
          * document.
          *
-         * <strong>WARNING:</strong> a {@link android.service.autofill.AutofillService} should only
-         * use this domain for autofill purposes when it trusts the app generating it (i.e., the app
-         * defined by {@link AssistStructure#getActivityComponent()}).
+         * <p><b>Warning:</b> an autofill service cannot trust the value reported by this method
+         * without verifing its authenticity&mdash;see the "Web security" section of
+         * {@link android.service.autofill.AutofillService} for more details.
          *
          * @return domain-only part of the document. For example, if the full URL is
-         * {@code http://my.site/login?user=my_user}, it returns {@code my.site}.
+         * {@code https://my.site/login?user=my_user}, it returns {@code my.site}.
          */
         @Nullable public String getWebDomain() {
             return mWebDomain;