diff options
Diffstat (limited to 'core/java/android')
| -rw-r--r-- | core/java/android/app/assist/AssistStructure.java | 8 |
1 files changed, 4 insertions, 4 deletions
diff --git a/core/java/android/app/assist/AssistStructure.java b/core/java/android/app/assist/AssistStructure.java index 55c22de59f7d..c208f1dbba8a 100644 --- a/core/java/android/app/assist/AssistStructure.java +++ b/core/java/android/app/assist/AssistStructure.java @@ -1260,12 +1260,12 @@ public class AssistStructure implements Parcelable { * <p>Typically used when the view associated with the view is a container for an HTML * document. * - * <strong>WARNING:</strong> a {@link android.service.autofill.AutofillService} should only - * use this domain for autofill purposes when it trusts the app generating it (i.e., the app - * defined by {@link AssistStructure#getActivityComponent()}). + * <p><b>Warning:</b> an autofill service cannot trust the value reported by this method + * without verifing its authenticity—see the "Web security" section of + * {@link android.service.autofill.AutofillService} for more details. * * @return domain-only part of the document. For example, if the full URL is - * {@code http://my.site/login?user=my_user}, it returns {@code my.site}. + * {@code https://my.site/login?user=my_user}, it returns {@code my.site}. */ @Nullable public String getWebDomain() { return mWebDomain; |