Security issue on SingleInstallBroadcastReceiver

[anjalsaneen]

Version: 5.2.0

On the documentation, it mentioned the code for SingleInstallBroadcastReceiver like this.

<!—The AppsFlyer Install Receiver is first and will broadcast to all receivers placed below it -->
<receiver android:name="com.appsflyer.SingleInstallBroadcastReceiver" android:exported="true">
  <intent-filter>
     <action android:name="com.android.vending.INSTALL_REFERRER" />
  </intent-filter>
</receiver>
<!—All other receivers should follow right after -->   

SingleInstallBroadcastReceiver Broadcast receiver is accessing publicly here due to android:exported="true". is it needed to make exportable="true". This flag indicates whether the given application component is available to other applications. it's a security vulnerability. Can we make this as android:exported="false"?

[github-actions[bot]]

This issue is closed due to inactivity. If the issue continue, please open a new one.