search

nic-delhi / AarogyaSetu_Android

Aarogya Setu Android app native code
https://www.aarogyasetu.gov.in/
Other
2.89k stars 1.96k forks source link

Remove stale copyToClipboard Javascript Interface method in HomeActivity #136

Open srikanthlogic opened 4 years ago

srikanthlogic commented 4 years ago

There is no need for the app to access clipboard and exposing the same to Webview poses risk for XSS snoopers to access clipboard. The feature (UPI / PMCARES payment is best done by a webview redirect to PMCARES site / UPI deep linking and there is no need for clipboard access to the app.

srikanthlogic commented 4 years ago

UPI integration was removed in f186553fe0bebd597eff483786307380c6806c21 but copyToClipboard remained, There is no reason for it to remain though.