Skip to content

ChargingStateChangeReceiver - #317

Open
mastermichi wants to merge 1 commit into
firebirdberlin:masterfrom
mastermichi:chargingstatechangereceiver
Open

ChargingStateChangeReceiver#317
mastermichi wants to merge 1 commit into
firebirdberlin:masterfrom
mastermichi:chargingstatechangereceiver

Conversation

@mastermichi

Copy link
Copy Markdown
Contributor

Fix for:

This broadcast receiver declares an intent-filter for a protected broadcast action string, which can only be sent by the system, not third-party applications. However, the receiver's onReceive method does not appear to call getAction to ensure that the received Intent's action string matches the expected value, potentially making it possible for another actor to send a spoofed intent with no action string or a different action string and cause undesired behavior.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant