Merge pull request #687 from vstostap/push-notification-broadcast-security

limit the components that Intent will resolve to

Author: Dallas62

android/src/main/java/com/dieam/reactnativepushnotification/modules/RNPushNotificationHelper.java

@@ -360,11 +360,12 @@ public void sendToNotificationCentre(Bundle bundle) {
 
                     Intent actionIntent = new Intent(context, intentClass);
                     actionIntent.addFlags(Intent.FLAG_ACTIVITY_SINGLE_TOP);
-                    actionIntent.setAction(context.getPackageName() + "." + action);
+                    actionIntent.setAction(packageName + "." + action);
 
                     // Add "action" for later identifying which button gets pressed.
                     bundle.putString("action", action);
                     actionIntent.putExtra("notification", bundle);
+                    actionIntent.setPackage(packageName);
 
                     PendingIntent pendingActionIntent = PendingIntent.getActivity(context, notificationID, actionIntent,
                             PendingIntent.FLAG_UPDATE_CURRENT);

android/src/main/java/com/dieam/reactnativepushnotification/modules/RNPushNotificationRegistrationService.java

@@ -31,8 +31,10 @@ protected void onHandleIntent(Intent intent) {
     }
 
     private void sendRegistrationToken(String token) {
-        Intent intent = new Intent(this.getPackageName() + ".RNPushNotificationRegisteredToken");
+        String packageName = this.getPackageName();
+        Intent intent = new Intent(packageName + ".RNPushNotificationRegisteredToken");
         intent.putExtra("token", token);
+        intent.setPackage(packageName);
         sendBroadcast(intent);
     }
 }