Skip to content
This repository has been archived by the owner on May 6, 2024. It is now read-only.

fix: vulnerable to cross-app script injection via crafted intent #1833

Merged
merged 2 commits into from
Oct 23, 2023
Merged

fix: vulnerable to cross-app script injection via crafted intent #1833

merged 2 commits into from
Oct 23, 2023

Commits on Oct 10, 2023

  1. fix: vulnerable to cross-app script injection via crafted intent 

    - Mitigated the vulnerability by disabling the ability to open custom-defined inner URIs through external sources. This was achieved by setting `android:exported="false"`.
- Setting `android:exported="false"` for the android component doesn't need to call out side from the app.

fixes: LEARNER-9557
    @farhan-arshad-dev
    farhan-arshad-dev committed Oct 10, 2023
    Configuration menu
    Copy the full SHA
    c3da710 View commit details
    Browse the repository at this point in the history

Commits on Oct 19, 2023

  1. fix: address PR comments 

    fixes: LEARNER-9557
    @farhan-arshad-dev
    farhan-arshad-dev committed Oct 19, 2023
    Configuration menu
    Copy the full SHA
    086b84e View commit details
    Browse the repository at this point in the history