漏洞

StrandHogg

• taskAffinity 漏洞分析：
  
  
• 解决：
  android:taskAffinity=”“
  
• 带来的问题：
  singleTask+taskAffinity=”” 存在多个最近列表页面

@Override
public void onBackPressed() {
    if (Build.VERSION.SDK_INT < Build.VERSION_CODES.R) {
        if (isTaskRoot()) super.onBackPressed();
    } else {
        super.onBackPressed();
    }
}

Ref

• The Risk of Android StrandHogg Security Issue and How it can be Mitigated https://medium.com/mobile-app-development-publication/the-risk-of-android-strandhogg-security-issue-and-how-it-can-be-mitigated-80d2ddb4af06