diff --git a/android/app/src/main/java/com/leanbitlab/ltvL/MainActivity.java b/android/app/src/main/java/com/leanbitlab/ltvL/MainActivity.java index 186d4dd..2bee9da 100644 --- a/android/app/src/main/java/com/leanbitlab/ltvL/MainActivity.java +++ b/android/app/src/main/java/com/leanbitlab/ltvL/MainActivity.java @@ -340,7 +340,11 @@ private Map buildAppMap(ActivityInfo activityInfo, boolean } private boolean launchActivityFromAction(String action) { - return tryStartActivity(new Intent(action)); + // Prevent Intent Action Injection by only allowing known actions + if (Settings.ACTION_SETTINGS.equals(action)) { + return tryStartActivity(new Intent(action)); + } + return false; } private boolean launchApp(String packageName) { diff --git a/android/app/src/main/java/me/efesser/flauncher/MainActivity.java b/android/app/src/main/java/me/efesser/flauncher/MainActivity.java index cca0a53..5a53288 100644 --- a/android/app/src/main/java/me/efesser/flauncher/MainActivity.java +++ b/android/app/src/main/java/me/efesser/flauncher/MainActivity.java @@ -331,7 +331,11 @@ private Map buildAppMap(ActivityInfo activityInfo, boolean } private boolean launchActivityFromAction(String action) { - return tryStartActivity(new Intent(action)); + // Prevent Intent Action Injection by only allowing known actions + if (Settings.ACTION_SETTINGS.equals(action)) { + return tryStartActivity(new Intent(action)); + } + return false; } private boolean launchApp(String packageName) {