Intent Redirection Vulnerability Android Content Provider

Viewed 158

There is a content provider in the application that I send a sticker to the whats up application.

    <provider
        android:name=".whatsappsticker.StickerContentProvider"
        android:authorities="${stickerContentProviderAuthority}"
        android:enabled="true"
        android:exported="true"
        android:readPermission="com.whatsapp.sticker.READ" />

In the report from Google, it says that I should edit it as exported = false, but it is impossible for me to send stickers this way.

How can I solve this problem without making exported = false?

Best wishes

0 Answers
Related