Inspectopedia Help

PreferenceActivity should not be exported

PreferenceActivity should not be exported

Fragment injection gives anyone who can send your PreferenceActivity an intent the ability to load any fragment, with any arguments, in your process.

Issue id: ExportedPreferenceActivity

http://securityintelligence.com/new-vulnerability-android-framework-fragment-injection

https://goo.gle/ExportedPreferenceActivity

Inspection Details

Available in:

IntelliJ IDEA 2023.3, Qodana for Android 2023.3, Qodana for JVM 2023.3

Plugin:

Android, 2022.3.1 Beta 2

Last modified: 13 July 2023