Post #2011189

@wesley @tumainidaniel @signalapp The issue (it isn’t really a “vulnerability” in the traditional sense) was that the OS would keep a persistent cache of notification contents even after the notification was deleted or the application was deleted. This cache could be read to see the contents which applications sent to the OS for use in past notifications. The fix is to clean up the cache more aggressively. Now, deleting an application should cause any notifications it has sent to be deleted from the OS cache. Deleting a notification should also cause it to be deleted from the cache.