android:allowBackup="false"

1412
3
12-19-2016 09:29 AM
MassimilianoSantini
New Contributor

Hi,

my assessment team has found that the application that the appstudio cloud have compiled, does not opt out of the Android backup infrastructure. While this is not a vulnerability per se, it does leave the application open to backup
and modification.

Is there way, somewhere, to set the allowBackup flag to "false" in the AndroidManifest file?

I'm developing in QTCreator

Thanks

Massimiliano

0 Kudos
3 Replies
nakulmanocha
Esri Regular Contributor

Yes, changes to AndroidManifest can be made if you choose to use LocalMake instead of CloudMake. Simply uncheck the Build app for selected targets option to create Project Files. This will give access to AndroidManifest file. I hope this helps.

Nakul


0 Kudos
MassimilianoSantini
New Contributor

Hi Nakul,

do you mean that the AndroidManifest file build in that way is the same builded by CloudMake? Are you sure?

It would be great news!

Thanks

0 Kudos
nakulmanocha
Esri Regular Contributor

Yes thats correct. With Local Make you get access to the Project files which Qt uses to build binaries.

-Nakul

0 Kudos