-
Notifications
You must be signed in to change notification settings - Fork 29.7k
Closed
Labels
P2Important issues not at the top of the work listImportant issues not at the top of the work lista: platform-viewsEmbedding Android/iOS views in Flutter appsEmbedding Android/iOS views in Flutter appsplatform-androidAndroid applications specificallyAndroid applications specificallyteam-androidOwned by Android platform teamOwned by Android platform team
Description
Use case
I discovered that Android task hijacking is allowed in a flutter application, any malicious app can put itself on the stack of the flutter application by adding taskAffinity="com.example.myFlutterApp" in the AndroidManifest.xml of the <activity> tag of the MainActivity
Steps to Reproduce
- create a new blank android project, in AndroidManifest.xml add
android:excludeFromRecents="true" android:launchMode="singleTask" android:taskAffinity="{com.example.myFlutterApp}"in the<activity>tag from the MainActivity. - open the
com.example.myflutterappapplication. - run the android app
- close it and open the flutter application again
Expected results:
The flutter application
Actual results:
the android application
Proposal
Automatically add android:taskAffinity="" to the <application> tag in the AndroidManifest.xml of the flutter app
Zazo032, NewlineFintechIndonesia, acoutts, arnaudruffin and MaxSchillingZazo032, nerder and MaxSchilling
Metadata
Metadata
Assignees
Labels
P2Important issues not at the top of the work listImportant issues not at the top of the work lista: platform-viewsEmbedding Android/iOS views in Flutter appsEmbedding Android/iOS views in Flutter appsplatform-androidAndroid applications specificallyAndroid applications specificallyteam-androidOwned by Android platform teamOwned by Android platform team
Type
Projects
Status
Engineer reviewed