Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
🔒️ Restrict the geofence location event to the current package
This is one of the security recommendations https://developer.android.com/develop/background-work/background-tasks/broadcasts#java I also tried to change the receiver to be NOT_EXPORTED, but could not get that to work in the limited time available. I also tried to send the message via an Intent that specified the context and the class, but that does not work with broadcast intents e-mission/e-mission-docs#1079 (comment) Testing done: - Before the change ``` 08-27 22:36:18.466 4901 5581 I GeofenceLocationIntentService: broadcasting intent Intent { act=GEOFENCE_LOCATION_RESULT (has extras) } ``` - After the change ``` 08-27 22:42:29.312 6785 7442 I GeofenceLocationIntentService: broadcasting intent Intent { act=GEOFENCE_LOCATION_RESULT pkg=edu.berkeley.eecs.emission (has extras) } ```
- Loading branch information