From: Shan Shaji <s.shaji@proxmox.com>
To: pve-devel@lists.proxmox.com
Cc: Azharul Haque <haque@azharul.com>
Subject: [PATCH pve_flutter_frontend] android: add taskAffinity attribute with empty string in MainActivity
Date: Thu, 27 Aug 2026 12:36:15 +0200 [thread overview]
Message-ID: <20260827103615.178000-1-s.shaji@proxmox.com> (raw)
On android vesions lower than 11, inorder to prevent Android Task
Hijacking (a.k.a, StrandHogg Attack [0][1]) `taskAffinity` attribute
was updated to empty string [0] for the flutter app template [2]. To
align with that and protect users running our app on older devices
(our `minSdkVersion` is 24) apply the same update here.
Note that StrandHogg v2 will still affect Android versions lower than
11, as the required OS level patches are only available from SDK level
30 [3].
- [0] https://github.com/flutter/flutter/issues/63559
- [1] https://developer.android.com/privacy-and-security/risks/strandhogg
- [2] https://github.com/flutter/flutter/pull/144018/changes
- [3] https://developer.android.com/privacy-and-security/risks/strandhogg#mitigations
Originally-by: Azharul Haque <haque@azharul.com>
Signed-off-by: Shan Shaji <s.shaji@proxmox.com>
---
This came up while I was reviewing this change [0]. When I checked the
install base on play console, we have 2,300 active install base for
android versions less than 11.
- [0] https://lore.proxmox.com/pve-devel/20260821034147.30194-10-haque@azharul.com/T/#u
android/app/src/main/AndroidManifest.xml | 1 +
1 file changed, 1 insertion(+)
diff --git a/android/app/src/main/AndroidManifest.xml b/android/app/src/main/AndroidManifest.xml
index 66135eb..654f13d 100644
--- a/android/app/src/main/AndroidManifest.xml
+++ b/android/app/src/main/AndroidManifest.xml
@@ -12,6 +12,7 @@
android:name="com.proxmox.app.pve_flutter_frontend.MainActivity"
android:exported="true"
android:launchMode="singleTop"
+ android:taskAffinity=""
android:theme="@style/LaunchTheme"
android:configChanges="orientation|keyboardHidden|keyboard|screenSize|locale|layoutDirection|fontScale|screenLayout|density|uiMode"
android:hardwareAccelerated="true"
--
2.47.3
reply other threads:[~2026-08-27 10:37 UTC|newest]
Thread overview: [no followups] expand[flat|nested] mbox.gz Atom feed
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20260827103615.178000-1-s.shaji@proxmox.com \
--to=s.shaji@proxmox.com \
--cc=haque@azharul.com \
--cc=pve-devel@lists.proxmox.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.