From 7a8dc5fa6dc36d6816fa40701e368acac6945e9a Mon Sep 17 00:00:00 2001 From: Javi Dolcet Date: Mon, 5 Jul 2021 16:29:39 +0200 Subject: [PATCH] fix(android): prevent implicit PendingIntent vulnerability (#1046) Co-authored-by: Mateus Andrade <15278828+MateusAndrade@users.noreply.github.com> --- android/src/main/java/cl/json/social/TargetChosenReceiver.java | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/android/src/main/java/cl/json/social/TargetChosenReceiver.java b/android/src/main/java/cl/json/social/TargetChosenReceiver.java index aef3717d..f3d0dd80 100644 --- a/android/src/main/java/cl/json/social/TargetChosenReceiver.java +++ b/android/src/main/java/cl/json/social/TargetChosenReceiver.java @@ -51,6 +51,7 @@ public static IntentSender getSharingSenderIntent(ReactContext reactContext) { Intent intent = new Intent(sTargetChosenReceiveAction); intent.setPackage(reactContext.getPackageName()); + intent.setClass(reactContext.getApplicationContext(), TargetChosenReceiver.class); intent.putExtra(EXTRA_RECEIVER_TOKEN, sLastRegisteredReceiver.hashCode()); final PendingIntent callback = PendingIntent.getBroadcast(reactContext, 0, intent, PendingIntent.FLAG_CANCEL_CURRENT | PendingIntent.FLAG_ONE_SHOT); @@ -88,4 +89,4 @@ public static void sendCallback(boolean isSuccess, Object... reply) { successCallback = null; failureCallback = null; } -} \ No newline at end of file +}