Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Android 64 bit Device- Not able to hide app information in recent apps screen while back grounding #431

Open
mprabhu33 opened this issue Aug 13, 2020 · 1 comment

Comments

@mprabhu33
Copy link

VAPT(Vulnerability Assessment and Penetration Testing ) team observed that android application allows to view information in recent apps screen while back grounding.
Risk:
Attacker or malicious application can extract information from the screen in the Recent Apps task switcher.

Added Event.DEACTIVATE in the main application page and in deactivate handler method try to active view as visible=false and alpha=0.
Not working in android 64 bit device.
Same code working on windows simulator.

Describe your problem in detail. Include the following information:
AIR SDK Version: 33.1.1.98
Device - Android 64 bit

Steps to Reproduce

Sample Code:
<s:ViewNavigatorApplication xmlns:fx="http://ns.adobe.com/mxml/2009"
xmlns:s="library://ns.adobe.com/flex/spark" firstView="views.TestAppHomeView"
applicationDPI="240"
activate="view1_activateHandler(event)"
deactivate="view1_deactivateHandler(event)">

protected function view1_deactivateHandler(event:Event):void
{
if(this.navigator && this.navigator.activeView)
{
this.navigator.activeView.visible = false;
this.navigator.activeView.alpha = 0;
}

		}

Sample Project:
DeactivateEvent.zip

Sample Screen Content:
Content

Not working on 64- bit Android device.
Not Working on Android

Working on Windows simulator
Working Switch apps - Hide

Known Workarounds

No Workarounds

Kindly let me know, how to hide the content when the app is in recent app section or background? Any workaround?

@mprabhu33
Copy link
Author

Any workaround?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants