topic Re: android:allowBackup="false" in ArcGIS AppStudio Questions

android:allowBackup="false"

MassimilianoSantini — Mon, 19 Dec 2016 17:29:59 GMT

Hi,

my assessment team has found that the application that the appstudio cloud have compiled, does not opt out of the Android backup infrastructure. While this is not a vulnerability per se, it does leave the application open to backup
and modification.

Is there way, somewhere, to set the allowBackup flag to "false" in the AndroidManifest file?

I'm developing in QTCreator

Thanks

Massimiliano

Re: android:allowBackup="false"

nakulmanocha — Wed, 21 Dec 2016 17:34:57 GMT

Yes, changes to AndroidManifest can be made if you choose to use LocalMake instead of CloudMake. Simply uncheck the Build app for selected targets option to create Project Files. This will give access to AndroidManifest file. I hope this helps.

Nakul

Re: android:allowBackup="false"

MassimilianoSantini — Wed, 28 Dec 2016 16:33:50 GMT

Hi Nakul,

do you mean that the AndroidManifest file build in that way is the same builded by CloudMake? Are you sure?

It would be great news!

Thanks

Re: android:allowBackup="false"

nakulmanocha — Wed, 28 Dec 2016 18:14:22 GMT

Yes thats correct. With Local Make you get access to the Project files which Qt uses to build binaries.

-Nakul