FirebaseUI-Android icon indicating copy to clipboard operation
FirebaseUI-Android copied to clipboard

Security issue with tapjacking

Open ArcherEmiya05 opened this issue 3 years ago • 1 comments

Step 1: Are you in the right place?

Yes

Step 2: Describe your environment

  • Android device: N/A
  • Android OS version: 21 up to 32
  • Google Play Services version: 4.3.10
  • Firebase/Play Services SDK version: 21.0.5
  • FirebaseUI version: 8.0.1

Step 3: Describe the problem:

image

image

Steps to reproduce:

Use FirebaseUI Auth UI

Observed Results:

Security risk level is medium

Expected Results:

Possible use of filterTouchesWhenObscure set to true?

Relevant Code:

// TODO(you): code here to reproduce the problem

ArcherEmiya05 avatar Jun 13 '22 17:06 ArcherEmiya05

Thanks for reporting this @ArcherEmiya05 We'll consider setting filterTouchesWhenObscure to true.

Contributions are also welcome :)

thatfiredev avatar Jun 14 '22 09:06 thatfiredev