peach-android / 431bdd9b44f6

feat: remove autofill origin verification — match by domain + app title (v2.10.7) June's directive: origin verification removed; matches shown by domain and app title. Fail-closed browser cert pins left nearly every web origin UNKNOWN, so 'everything says unverified' and matches were withheld. - Delete AutofillOriginTrust + TrustedBrowsers.kt + authenticateAutofillOrigin - New AutofillOrigin.kt: web origins resolve the page domain; native apps resolve verified app-link domains + display label (framework-authenticated caller package only — never caller extras) - matchEntries ranks by registrable domain + case-insensitive app title - Service: save offered always (no TRUSTED_WEB gate); drop 'Verify site in Peach…' and 'Origin not verified' copy - Picker: no trust re-derivation or warning box; origin re-resolved in-process - Tests: delete PickerOriginTrustTest/TrustedBrowsersTest; rewrite trust-based cases in AutofillMatchTest/AutofillPickerSearchTest/AutofillCardTest Suite: 879 tests, only the 5 known pre-existing failures. Deliberate product-owner tradeoff: show matches for unverified origins; the explicit picker tap remains the security boundary. Live autofill needs on-device QA.

dev · 4 weeks ago · 2026-08-02 · 5.8 MB

parent: f5b461dc4f10