[remoting android] Set android:exported=false for all components in the manifest. |
|||
Issue descriptionFrom security review, it is recommended to set android:exported=false in all components that don't need to be exposed to third parties.
,
Aug 24 2016
,
Aug 25 2016
The following revision refers to this bug: https://chromium.googlesource.com/chromium/src.git/+/bac8641dd72681de638926e9f9524f5fdfd75af9 commit bac8641dd72681de638926e9f9524f5fdfd75af9 Author: lambroslambrou <lambroslambrou@chromium.org> Date: Thu Aug 25 00:27:55 2016 [remoting android] Explicitly add 'exported' attribute in the manifest. Security review recommends explicitly setting the 'exported' property in the Android manifest. This avoids exposing private items on older versions of Android. According to https://developer.android.com/guide/topics/manifest/activity-element.html#exported this setting defaults to true for Activities with Intent filters, false otherwise. BUG= 638032 Review-Url: https://codereview.chromium.org/2272883003 Cr-Commit-Position: refs/heads/master@{#414217} [modify] https://crrev.com/bac8641dd72681de638926e9f9524f5fdfd75af9/remoting/android/java/AndroidManifest.xml.jinja2
,
Sep 7 2016
|
|||
►
Sign in to add a comment |
|||
Comment 1 by dah...@chromium.org
, Aug 16 2016Owner: lambroslambrou@chromium.org
Status: Assigned (was: Untriaged)