Lint

Many of the current security issues can be found using Lint and looking at any warnings flagged in the security category (see Figure 9-5). In this case it shows that we haven’t set the android:allowBackup to false in the AndroidManifest.xml file.

Image

Figure 9-5 Lint security tags

Google will continue to add Security issues to the Lint Security Category sooner or later. They are already addressing more sophisticated attacks, not just the simple mistakes such as making a file MODE_WORLD_READABLE.

Get Bulletproof Android™: Practical Advice for Building Secure Apps now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.