search

instacart / truetime-android

Android NTP time library. Get the true current time impervious to device clock time changes
https://tech.instacart.com/truetime/
Apache License 2.0
1.41k stars 194 forks source link

Vulnerable exported broadcast receiver #137

Closed anjalsaneen closed 2 years ago

anjalsaneen commented 3 years ago 
    <receiver android:name=".BootCompletedBroadcastReceiver">

This Receiver can use by other applications. but does not properly restrict which applications can launch the component or access the data it contains.

Fix PR: https://github.com/instacart/truetime-android/pull/136

kaushikgopal commented 2 years ago

🙏. #136 should be merged.