Commit: c59e58dc3cc1c94c6ca0a37f2ee7de66e3021edb - external-koush-Superuser (git)

external/koush/Superuser

Commit MetaInfo

• Revision: c59e58dc3cc1c94c6ca0a37f2ee7de66e3021edb (tree)
• Time: 2014-07-20 12:18:30
• Author: Veeti Paananen <veeti.paananen@roje...>
• Commiter: Veeti Paananen

Log Message

Prevent clickjacking of superuser requests

Enable filterTouchesWhenObscured on the accept request button to prevent
possible clickjacking attacks. This is a measure used in many sensitive
dialogs (app installation, backup & VPN) in AOSP.

Change-Id: I33c18c449c909b97b29b981bffe7f3095adee506

Change Summary

• modified: Superuser/res/layout/request.xml

Incremental Difference

--- a/Superuser/res/layout/request.xml
+++ b/Superuser/res/layout/request.xml
@@ -119,6 +119,7 @@
             android:layout_height="wrap_content"
             android:layout_weight="1"
             android:enabled="false"
+            android:filterTouchesWhenObscured="true"
             android:text="@string/allow" />
     </LinearLayout>