diff options
| author | Danilo M. <danix@danix.xyz> | 2026-11-02 09:51:18 +0100 |
|---|---|---|
| committer | Danilo M. <danix@danix.xyz> | 2026-11-02 09:51:18 +0100 |
| commit | 34e29204a3720741b4b5373cae2afbdb0e17bad2 (patch) | |
| tree | 56d5107c713035674fbdf0ad8f033f384d8d117d /app/src/main/AndroidManifest.xml | |
| parent | fda98e40f68539e5e50d29158bb5b446e6c41d5d (diff) | |
| download | HardenedPass-34e29204a3720741b4b5373cae2afbdb0e17bad2.tar.gz HardenedPass-34e29204a3720741b4b5373cae2afbdb0e17bad2.zip | |
fix: stop exporting DecryptActivity and validate decrypt paths
DecryptActivity was exported without an intent filter, so any installed
app could start it with arbitrary FILE_PATH/REPO_PATH extras (and crash
it by omitting them). Nothing outside the app needs to launch it:
shortcuts and the decrypt action go through LaunchActivity.
LaunchActivity stays exported, so it now treats FILE_PATH as untrusted:
the path is forwarded only when it canonically resolves to a regular
file inside the password store, and REPO_PATH is always the real store
directory instead of the caller-supplied value. Anything else falls
back to the main screen.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Diffstat (limited to 'app/src/main/AndroidManifest.xml')
| -rw-r--r-- | app/src/main/AndroidManifest.xml | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/app/src/main/AndroidManifest.xml b/app/src/main/AndroidManifest.xml index d575c7f8..407697cf 100644 --- a/app/src/main/AndroidManifest.xml +++ b/app/src/main/AndroidManifest.xml @@ -51,7 +51,7 @@ <activity android:name=".ui.crypto.DecryptActivity" - android:exported="true" /> + android:exported="false" /> <activity android:name=".ui.main.LaunchActivity" |