Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Security - Fix StrandHogg vulnerability #463

Open
paulinea opened this issue Mar 9, 2023 · 0 comments · Fixed by #464
Open

Security - Fix StrandHogg vulnerability #463

paulinea opened this issue Mar 9, 2023 · 0 comments · Fixed by #464
Assignees
@paulinea
Labels
📱 demo app

Comments

@paulinea
Copy link
Member

paulinea commented Mar 9, 2023

StrandHogg V1 : For security reason, please set up android:taskAffinity = "" in the AndroidManifest.xml of your app. For more details about this security vulnerability called "StrandHogg", please check this article here : https://plazza.orange.com/people/gil.lebrun@orange.com/blog/2020/04/09/avoid-strandhogg-hack-in-your-android-app
@paulinea paulinea self-assigned this Mar 9, 2023
paulinea added a commit that referenced this issue Mar 9, 2023
@paulinea
[#463] Fix security vulnerability by setting the taskAffinity to an e…
ad3799c 
…mpty string
@paulinea paulinea linked a pull request Mar 9, 2023 that will close this issue
463 - Fix security vulnerability #464
Merged
florentmaitre pushed a commit that referenced this issue Mar 10, 2023
@paulinea @florentmaitre
[#463] Fix security vulnerability by setting the taskAffinity to an e…
f85f98b 
…mpty string
florentmaitre added a commit that referenced this issue Mar 10, 2023
@florentmaitre
[#463] Review: Remove singleInstance launch mode to avoid side effects
975eb41
florentmaitre added a commit that referenced this issue Mar 10, 2023
@florentmaitre
[#463] Prepare release 0.11.1
9b1d303
florentmaitre added a commit that referenced this issue Mar 10, 2023
@florentmaitre
[#463] Test
84c9c6c
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@paulinea paulinea

Labels
📱 demo app
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

463 - Fix security vulnerability Orange-OpenSource/ods-android
1 participant
@paulinea