Scripts started by external activities should prompt the user to allow execution

damonkohler / sl4a

SL4A brings scripting languages to Android by allowing you to edit and execute scripts and interactive interpreters directly on the Android device.

Apache License 2.0

2.44k stars 800 forks source link

Open damonkohler opened 9 years ago

damonkohler commented 9 years ago

From @GoogleCodeExporter on May 31, 2015 11:28

Not prompting the user is a potential security hole.

Original issue reported on code.google.com by damonkoh...@gmail.com on 6 Nov 2010 at 4:19

Copied from original issue: damonkohler/android-scripting#468

damonkohler commented 9 years ago

From @GoogleCodeExporter on May 31, 2015 11:28

I don't know how possible this is, but it would be cool if it limited the 
scripts permissions to the permissions for the calling external activity.

Original comment by mrst...@gmail.com on 3 Jul 2013 at 5:43