Description

Detects Android content providers that are exported and accessible to other applications. Exported content providers can expose sensitive application data to unauthorized applications if not properly protected with permissions.

Detection Strategy

• Scans AndroidManifest.xml for declared content provider components

• Checks if provider has android:exported="true" or no export attribute with targetSdkVersion < 17

• Reports a provider with no export attribute and a target SDK lower than 17, whatever its permission

• Reports a provider with android:exported="true" only if it also sets android:grantUriPermissions="true" and its android:permission is not one the app declares