SensitiveContent should support ways to hook custom handlers for lower Android versions or iOS subsystems

[matasb-google]

To reword/clarify feature request:

Would be great to be able to use single/same API across app (SensitiveContent) to hook-up custom protections (for example iOS, old Android versions screen protections, screen recording detections, etc). Not requesting to implement or provide those protections, just to open up API to be able to provide custom "hooks".

Use case

While SensitiveContent seems to be great and intuitive API, it does not allow to expand it to older Android versions and/or iOS. So multiple overlapping security features are required.

It would be great to have some way to bind/hook custom code to enable protections (like FLAG_SECURE, or tapjacking, etc) which are not specific to Android 35+.

Context: https://docs.flutter.dev/platform-integration/android/sensitive-content

Proposal

Allowing to pass either global registration likeSensitiveContent.addHandler(<>), or local SensitiveContent(handler: <>, child: ...) or configure additional parent widget SensitiveContentHandlers(handlers)

[darshankawar]

Thanks for the report @matasb-google
I think your case is similar to #159208 so please follow-up in it for further updates. Closing this as a duplicate. If you disagree, write in comments and I'll reopen it.

[matasb-google]

Note, this would allow to implement protection for iOS as well. So not sure if fully duplicate?

And/or allows to implement similar other protections (TapJacking, or specific checks for screen recording).

[darshankawar]

Note, this would allow to implement protection for iOS as well. So not sure if fully duplicate?

Yes, the linked issue seems only for Android. I see that there are couple of community packages that supports iOS as well:

https://pub.dev/packages/flutter_sensitive_content
https://pub.dev/packages/sensitive_content_analysis

so please check if they are helpful for your case or not.

And/or allows to implement similar other protections (TapJacking, or specific checks for screen recording).

There's one open issue for tapJacking: #40422

[matasb-google]

I agree that there is plugins/packages - but I am suggesting/requesting feature to support single SensitiveContent API, which is supported by Flutter team, rather than needing to have multiple different SensitiveContent APIs.

[matasb-google]

To reword/clarify feature request:

Would be great to be able to use single/same API across app (SensitiveContent) to hook-up custom protections (for example iOS, old Android versions screen protections, screen recording detections, etc). Not requesting to implement or provide those protections, just to open up API to be able to provide custom "hooks".

[darshankawar]

Sure, thanks for the feedback. Reopening and labeling for team's tracking.