commit b7773ce8751b424b824cdd1e78a95520d124734c
author Seigo Nonaka <nona@google.com> Thu Jun 22 08:22:18 2017 -0700
committer Neil Fuller <nfuller@google.com> Fri Jun 23 10:02:59 2017 +0000
tree b936e55c5ca46cd71cbece78d8c265a723d9755e
parent 58ad534db862cbf573e09f8d8109c29440fb7b52

Stop loading other package's font by default.

Since CONTEXT_RESTRICTED is not a default flag of createPackageContext,
we can't rely on it for preventing unexpected font injections.
To protect developers and existing apps from a risk of font injection,
stop loading font from other package's resouce unless the developer
explicitly set CONTEXT_IGNORE_SECURITY.

Bug: 62813533
Bug: 62879353
Test: Manually done
Merged-In: I4442ddc48dadb5c968b444be86038b602074d301
Change-Id: I4442ddc48dadb5c968b444be86038b602074d301
(cherry picked from commit 6d6cd68660635d670b0cb17f348b7c1da13704b3)