etesync / android

EteSync - Secure, end-to-end encrypted, and privacy respecting sync for your contacts, calendars and tasks.
https://www.etesync.com
GNU General Public License v3.0
296 stars 33 forks source link

Add FLAG_SECURE to all layouts #222

Open 0xedward opened 1 year ago

0xedward commented 1 year ago

The goal is to prevent apps that abuse Draw on Top and Accessibility Service permissions from reading user's account username, calendar events, and contact details when user is browsing those screens using FLAG_SECURE

My guess is that we'll probably want to expose a toggle in the settings to remove FLAG_SECURE to allow users who want to screenshot some screen in the app.