mirror of
https://github.com/sudosylabs/vnidrop.git
synced 2026-08-05 02:29:55 +02:00
Hammed Abass
e7fb0331b5
Close high-severity findings from the security review: default-deny blob gets for unmapped hashes, map collection members for ACL, fail closed on unknown access modes, require vnd1 tickets only, redact tickets from events, exclude Android app-data backups, and tighten secret-file creation.
64 lines
2.6 KiB
XML
64 lines
2.6 KiB
XML
<?xml version="1.0" encoding="utf-8"?>
|
|
<manifest xmlns:android="http://schemas.android.com/apk/res/android">
|
|
|
|
<uses-permission android:name="android.permission.INTERNET"/>
|
|
<uses-permission android:name="android.permission.ACCESS_NETWORK_STATE"/>
|
|
<uses-permission android:name="android.permission.POST_NOTIFICATIONS"/>
|
|
<uses-permission android:name="android.permission.NFC"/>
|
|
<!-- Pre-Android 10 public Downloads writes. Android 10+ uses MediaStore. -->
|
|
<uses-permission
|
|
android:name="android.permission.WRITE_EXTERNAL_STORAGE"
|
|
android:maxSdkVersion="28"/>
|
|
<uses-feature android:name="android.hardware.nfc" android:required="false"/>
|
|
|
|
<application
|
|
android:allowBackup="true"
|
|
android:fullBackupContent="@xml/backup_rules"
|
|
android:dataExtractionRules="@xml/data_extraction_rules"
|
|
android:icon="@mipmap/ic_launcher"
|
|
android:label="@string/app_name"
|
|
android:roundIcon="@mipmap/ic_launcher_round"
|
|
android:supportsRtl="true"
|
|
android:theme="@android:style/Theme.Material.NoActionBar">
|
|
<meta-data android:name="com.google.mlkit.vision.DEPENDENCIES" android:value="barcode_ui"/>
|
|
<activity
|
|
android:exported="true"
|
|
android:launchMode="singleTask"
|
|
android:name=".MainActivity">
|
|
<intent-filter>
|
|
<action android:name="android.intent.action.MAIN"/>
|
|
|
|
<category android:name="android.intent.category.LAUNCHER"/>
|
|
</intent-filter>
|
|
<!-- Preferred: exact VniDrop invitation MIME type. -->
|
|
<intent-filter>
|
|
<action android:name="android.intent.action.VIEW"/>
|
|
<category android:name="android.intent.category.DEFAULT"/>
|
|
<category android:name="android.intent.category.BROWSABLE"/>
|
|
<data android:mimeType="application/vnd.vnidrop.transfer"/>
|
|
</intent-filter>
|
|
<!-- Fallback: .vnd files often arrive as octet-stream / unknown MIME. -->
|
|
<intent-filter>
|
|
<action android:name="android.intent.action.VIEW"/>
|
|
<category android:name="android.intent.category.DEFAULT"/>
|
|
<category android:name="android.intent.category.BROWSABLE"/>
|
|
<data android:scheme="content"/>
|
|
<data android:scheme="file"/>
|
|
<data android:mimeType="*/*"/>
|
|
<data android:pathPattern=".*\\.vnd"/>
|
|
<data android:pathPattern=".*\\..*\\.vnd"/>
|
|
<data android:pathPattern=".*\\..*\\..*\\.vnd"/>
|
|
<data android:pathPattern=".*\\..*\\..*\\..*\\.vnd"/>
|
|
</intent-filter>
|
|
</activity>
|
|
<provider
|
|
android:name="androidx.core.content.FileProvider"
|
|
android:authorities="${applicationId}.fileprovider"
|
|
android:exported="false"
|
|
android:grantUriPermissions="true">
|
|
<meta-data android:name="android.support.FILE_PROVIDER_PATHS" android:resource="@xml/file_paths"/>
|
|
</provider>
|
|
</application>
|
|
|
|
</manifest>
|