One of my customers did a penetration test and detected IntentSpoofing from Qt Android App:

from the test protocol:
Use of a string value market://details?id=org.kde.necessitas.ministro to construct an Intent --> Method org.qtproject.qt5.android.bindings.QtActivityLoader$1.onClick(): ...
see details: QTBUG-82546

From my understanding this onClick() method is only needed if Qt Android App is deployed using Ministro. I'm not using Ministro - is there a way to remove this piece of code if not deployed w Ministro ?

ekke

_______________________________________________
Interest mailing list
Interest@qt-project.org
https://lists.qt-project.org/listinfo/interest

Reply via email to