android:allowBackup="false"

Question

Hi,

my assessment team has found that the application that the appstudio cloud have compiled, does not opt out of the Android backup infrastructure. While this is not a vulnerability per se, it does leave the application open to backup
and modification.

Is there way, somewhere, to set the allowBackup flag to "false" in the AndroidManifest file?

I'm developing in QTCreator

Thanks

Massimiliano

nakulmanocha · Answer

Yes thats correct. With Local Make you get access to the Project files which Qt uses to build binaries.

-Nakul

MassimilianoSantini · Answer

Hi Nakul,

do you mean that the AndroidManifest file build in that way is the same builded by CloudMake? Are you sure?

It would be great news!

Thanks

nakulmanocha · Answer

Yes, changes to AndroidManifest can be made if you choose to use LocalMake instead of CloudMake. Simply uncheck the Build app for selected targets option to create Project Files. This will give access to AndroidManifest file. I hope this helps.

Nakul