android-security-lints

android-security-lints copied to clipboard

How to use this tool to detect whether there is an Android-DirtyStream vulnerability

1

Hello, may I ask how to use this tool to detect whether there is an Android-DirtyStream vulnerability, or whether the tool can detect an Android-DirtyStream vulnerability?

0nlyuAarOn

Addressing the comment in https://github.com/google/android-security-lints/pull/12#issuecomment-3527813294

olivandcode

`TapjackingVulnerable` warnings not resolved by `filterTouchesWhenObscured` attribute

2

Android Lint with this library integrated gives me `TapjackingVulnerable` warnings on certain Views. It says to add the `android:filterTouchesWhenObscured` attribute to protect the View. I do exactly that. The warning...

JordanLongstaff

MissingAutoVerifyAttribute contradicts AppLinkUrlError rule

3

So we use Android lint shipped with AGP (currently `8.10.0`) and the lint checks provided by `com.android.security.lint:lint::1.0.3`. Currently we use a custom scheme for intent filters in our app. This...

G00fY2