encdroid icon indicating copy to clipboard operation
encdroid copied to clipboard
verified publisher icon mrpdaemon

Encdroid leaks files into its folder

Open cliffjao opened this issue 8 years ago • 1 comments

The files are 0B, so no content is leaked at least. But you can see the unencrypted filenames.

cliffjao avatar Jan 02 '18 16:01 cliffjao

Actually they are not (or at least not always) 0b long: on my device, accessing a .XLS file with WPS, and a picture with QuickPic, has left their complete unencrypted copies in /storage/emulated/0/Encdroid ... This, security wise, is quite bad. If the use of temp files can't be avoided in unrooted devices, at least they should be thoroughly erased once the app closes them.

enzomich avatar Jul 27 '18 05:07 enzomich