currently my app in ionic when performing a security scan detects this issue Broadcast Receiver (com.google.android.gms.measurement.AppMeasurementInstallReferrerReceiver) is Protected by a permission, but the protection level of the permission should be checked. Permission: android.permission.INSTALL_PACKAGES [android: exported = true]
I am currently editing my app config.xml file but I keep getting the message:
my config.xml is :
<platform name="android">
<hook src="hooks/add_tools_namespace.js" type="after_prepare" />
<allow-intent href="market:*" />
<allow-navigation href="*" />
<allow-intent href="*" />
<access origin="*" />
<icon density="ldpi" src="resources/android/icon/drawable-ldpi-icon.png" />
<icon density="mdpi" src="resources/android/icon/drawable-mdpi-icon.png" />
<icon density="hdpi" src="resources/android/icon/drawable-hdpi-icon.png" />
<icon density="xhdpi" src="resources/android/icon/drawable-xhdpi-icon.png" />
<icon density="xxhdpi" src="resources/android/icon/drawable-xxhdpi-icon.png" />
<icon density="xxxhdpi" src="resources/android/icon/drawable-xxxhdpi-icon.png" />
<splash density="land-ldpi" src="resources/android/splash/drawable-land-ldpi-screen.png" />
<splash density="land-mdpi" src="resources/android/splash/drawable-land-mdpi-screen.png" />
<splash density="land-hdpi" src="resources/android/splash/drawable-land-hdpi-screen.png" />
<splash density="land-xhdpi" src="resources/android/splash/drawable-land-xhdpi-screen.png" />
<splash density="land-xxhdpi" src="resources/android/splash/drawable-land-xxhdpi-screen.png" />
<splash density="land-xxxhdpi" src="resources/android/splash/drawable-land-xxxhdpi-screen.png" />
<splash density="port-ldpi" src="resources/android/splash/drawable-port-ldpi-screen.png" />
<splash density="port-mdpi" src="resources/android/splash/drawable-port-mdpi-screen.png" />
<splash density="port-hdpi" src="resources/android/splash/drawable-port-hdpi-screen.png" />
<splash density="port-xhdpi" src="resources/android/splash/drawable-port-xhdpi-screen.png" />
<splash density="port-xxhdpi" src="resources/android/splash/drawable-port-xxhdpi-screen.png" />
<splash density="port-xxxhdpi" src="resources/android/splash/drawable-port-xxxhdpi-screen.png" />
<edit-config file="app/src/main/AndroidManifest.xml" mode="merge" target="/manifest/application">
<application android:usesCleartextTraffic="false" />
<application android:requestLegacyExternalStorage="true" />
<application android:allowBackup="false" tools:replace="android:allowBackup" />
</edit-config>
<config-file file="app/src/main/AndroidManifest.xml" mode="merge" target="/manifest/application">
<uses-permission android:name="android.permission.INTERNET" />
<uses-permission android:name="android.permission.ACCESS_NETWORK_STATE" />
</config-file>
<config-file file="app/src/main/AndroidManifest.xml" mode="merge" target="/manifest/application">
<activity android:exported="false" android:name="com.google.android.gms.tagmanager.TagManagerPreviewActivity" android:noHistory="true" />
</config-file>
<config-file file="app/src/main/AndroidManifest.xml" mode="merge" target="/manifest/application">
<receiver android:enabled="true" android:exported="false" android:name="com.google.android.gms.measurement.AppMeasurementInstallReferrerReceiver" android:permission="android.permission.INSTALL_PACKAGES" />
</config-file>
<config-file file="app/src/main/AndroidManifest.xml" mode="merge" target="/manifest/application">
<receiver android:enabled="true" android:exported="false" android:name="com.google.firebase.iid.FirebaseInstanceIdReceiver" android:permission="com.google.android.c2dm.permission.SEND" />
</config-file>
<config-file file="app/src/main/AndroidManifest.xml" mode="merge" target="/manifest/application">
<activity android:name="com.google.firebase.auth.internal.FederatedSignInActivity" tools:replace="android:standard" />
</config-file>
<config-file file="app/src/main/AndroidManifest.xml" mode="merge" target="/manifest/application">
<activity android:exported="false" android:name=".com.google.firebase.auth.internal.FederatedSignInActivity" android:permission="com.google.firebase.auth.api.gms.permission.LAUNCH_FEDERATED_SIGN_IN" />
</config-file>
<config-file file="app/src/main/AndroidManifest.xml" mode="merge" target="/manifest/application">
<service android:enabled="true" android:exported="false" android:name="com.google.android.gms.auth.api.signin.RevocationBoundService" android:permission="com.google.android.gms.auth.api.signin.permission.REVOCATION_NOTIFICATION" />
</config-file>
</platform>
add the permission but i keep getting the error
<config-file file="app/src/main/AndroidManifest.xml" mode="merge" target="/manifest/application">
<receiver android:enabled="true" android:exported="false" android:name="com.google.android.gms.measurement.AppMeasurementInstallReferrerReceiver" android:permission="android.permission.INSTALL_PACKAGES" />
</config-file>