Merge pull request #136 from anjalsaneen/patch-1

Fix: Vulnerable exported broadcast receiver
instacart · Oct 8, 2021 · ddde9c4 · ddde9c4
2 parents 44a3135 + 765a127
commit ddde9c4
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/library/src/main/AndroidManifest.xml b/library/src/main/AndroidManifest.xml
@@ -12,7 +12,8 @@
 
     <application>
         <!-- Start the Service if applicable on boot -->
-        <receiver android:name=".BootCompletedBroadcastReceiver">
+        <receiver android:name=".BootCompletedBroadcastReceiver"
+            android:exported="false">
             <intent-filter>
                 <action android:name="android.intent.action.BOOT_COMPLETED"/>
             </intent-filter>