mollyim / mollyim-android

Enhanced and security-focused fork of Signal.
GNU Affero General Public License v3.0
1.37k stars 77 forks source link

investigate about android.permission.BROADCAST_STICKY #271

Closed ghost closed 1 month ago

ghost commented 5 months ago

Is there an existing request for this?

Feature description

As the title says.

“Android apps and the Android system can use broadcasts as a messaging system to notify other apps of events that they might be interested in. Sticky broadcasts are a special type of broadcast for which the sent intent object(s) remains in the cache after the broadcast is complete. The system may re-broadcast sticky intents to later registrations of receivers. Unfortunately, the sticky broadcasts API suffers from a number of security-related shortcomings, which is why it was deprecated in Android 5.0 (API level 21)”

I don’t know if is possible to get rid of it even though it is deprecated.