openMF / android-client

An android client for the MifosX platform
https://openmf.github.io/mobileapps.github.io/
Mozilla Public License 2.0
196 stars 577 forks source link

Fixes Use of implicit PendingIntents vulnerability detected by CodeQL #1980

Closed Onyx2406 closed 1 year ago

Onyx2406 commented 1 year ago

Fixes #1979 By setting the FLAG_IMMUTABLE, we're telling Android that once the PendingIntent is created, it can't be changed by any other app. This makes it much more difficult for a malicious app to exploit the PendingIntent.

Please make sure these boxes are checked before submitting your pull request - thanks!