CodeMechanic-Bot opened a new pull request, #19648: URL: https://github.com/apache/tvm/pull/19648
## Summary This patch resolves a security vulnerability by explicitly setting the `android:exported` flag within the `AndroidManifest.xml` file. Previously, certain components were missing this required flag, which could lead to incorrect permission handling and exposure, potentially allowing unauthorized access to components of the application. ## Changes * **Security:** Added explicit `android:exported="true"` or `android:exported="false"` flags to relevant `<activity>`, `<receiver>`, and `<provider>` tags in `AndroidManifest.xml`. * **Safety:** Ensures that all exposed components properly define their export status, adhering to modern Android best practices and mitigating potential misconfigurations. * **Compatibility:** Improves the application's security posture and adherence to Android framework requirements regarding component visibility. ## Testing - Verified logic locally using Docker sandbox Fixes #AUTO_SEMGREP -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
