attribution-reporting-api
attribution-reporting-api copied to clipboard
InputEvent for click verification on Android
Hello privacy sandbox team. I want to inquire about the usage of InputEvent as part of the registerSource API. I understand that InputEvent is required for validation to ensure that a click came from the system and not bots/other sources. However, my codebase has made extensive use of onClickListener instead of onTouchListener and it would be a difficult and costly migration to use onTouchListener instead.
Do you have recommended approach for using this API for developers that use onClickListener? Click listeners are a basic, ingrained part of Android development used everywhere, and essentially this API is not compatible with that as far as I can tell.
Alternatively, looking at the AOSP https://cs.android.com/android/platform/superproject/main/+/main:packages/modules/Ad[…]=351;drc=ad68ffd12e70704e6cfe2e33af3fed993d78464e;bpv=1;bpt=1 this verification can be disabled. Will you allow consumers of this API to disable click verification and assume the risk of invalid clicks themselves?