From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from gate001.proxmox.com (gate001.proxmox.com [IPv6:2a0f:8001:1:32::40]) by lore.proxmox.com (Postfix) with ESMTPS id 31F441FF0E1 for ; Thu, 27 Aug 2026 12:37:18 +0200 (CEST) Received: from gate001.proxmox.com (localhost.localdomain [127.0.0.1]) by gate001.proxmox.com (Proxmox) with ESMTP id ECFC5214D7; Thu, 27 Aug 2026 12:37:17 +0200 (CEST) From: Shan Shaji To: pve-devel@lists.proxmox.com Subject: [PATCH pve_flutter_frontend] android: add taskAffinity attribute with empty string in MainActivity Date: Thu, 27 Aug 2026 12:36:15 +0200 Message-ID: <20260827103615.178000-1-s.shaji@proxmox.com> X-Mailer: git-send-email 2.47.3 MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Bm-Milter-Handled: 55990f41-d878-4baa-be0a-ee34c49e34d2 X-Bm-Transport-Timestamp: 1787827024862 X-SPAM-LEVEL: Spam detection results: 0 AWL 0.498 Adjusted score from AWL reputation of From: address DMARC_MISSING 0.1 Missing DMARC policy KAM_DMARC_STATUS 0.01 Test Rule for DKIM or SPF Failure with Strict Alignment (newer systems) RCVD_IN_DNSWL_MED -2.3 Sender listed at https://www.dnswl.org/, medium trust SPF_HELO_NONE 0.001 SPF: HELO does not publish an SPF Record SPF_PASS -0.001 SPF: sender matches SPF record Message-ID-Hash: R67PNIGDQI3ERXZ5N5LXOWWKBLKKG3MK X-Message-ID-Hash: R67PNIGDQI3ERXZ5N5LXOWWKBLKKG3MK X-MailFrom: s.shaji@proxmox.com X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; loop; banned-address; emergency; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header CC: Azharul Haque X-Mailman-Version: 3.3.10 Precedence: list List-Id: Proxmox VE development discussion List-Help: List-Owner: List-Post: List-Subscribe: List-Unsubscribe: On android vesions lower than 11, inorder to prevent Android Task Hijacking (a.k.a, StrandHogg Attack [0][1]) `taskAffinity` attribute was updated to empty string [0] for the flutter app template [2]. To align with that and protect users running our app on older devices (our `minSdkVersion` is 24) apply the same update here. Note that StrandHogg v2 will still affect Android versions lower than 11, as the required OS level patches are only available from SDK level 30 [3]. - [0] https://github.com/flutter/flutter/issues/63559 - [1] https://developer.android.com/privacy-and-security/risks/strandhogg - [2] https://github.com/flutter/flutter/pull/144018/changes - [3] https://developer.android.com/privacy-and-security/risks/strandhogg#mitigations Originally-by: Azharul Haque Signed-off-by: Shan Shaji --- This came up while I was reviewing this change [0]. When I checked the install base on play console, we have 2,300 active install base for android versions less than 11. - [0] https://lore.proxmox.com/pve-devel/20260821034147.30194-10-haque@azharul.com/T/#u android/app/src/main/AndroidManifest.xml | 1 + 1 file changed, 1 insertion(+) diff --git a/android/app/src/main/AndroidManifest.xml b/android/app/src/main/AndroidManifest.xml index 66135eb..654f13d 100644 --- a/android/app/src/main/AndroidManifest.xml +++ b/android/app/src/main/AndroidManifest.xml @@ -12,6 +12,7 @@ android:name="com.proxmox.app.pve_flutter_frontend.MainActivity" android:exported="true" android:launchMode="singleTop" + android:taskAffinity="" android:theme="@style/LaunchTheme" android:configChanges="orientation|keyboardHidden|keyboard|screenSize|locale|layoutDirection|fontScale|screenLayout|density|uiMode" android:hardwareAccelerated="true" -- 2.47.3