Exported provider permissions - readPermission/writePermission overlooked

[TheDauntless]

When checking exported providers in the Application Manifest, QARK checks for the android:permission flag. If it can't find it, it assumes the provider is not protected by a permission. However, you can use android:readPermission and android:writePermission to set the individual read/write permissions. QARK should check the presence of these attributes if no android:permission is found.

http://developer.android.com/guide/topics/manifest/provider-element.html

[SecBro1]

Agreed, sorry about that. I'll take a look and see what I can do.