Add safer intents sample

.github/workflows/build.yml

@@ -16,7 +16,7 @@ jobs:
 
  steps:
  - name: Checkout
- uses: actions/checkout@v3
+ uses: actions/checkout@v4
 
  - name: Validate Gradle Wrapper
  uses: gradle/wrapper-validation-action@v1
@@ -46,25 +46,25 @@ jobs:
  run: ./gradlew testDebug
 
  - name: Upload build outputs (APKs)
- uses: actions/upload-artifact@v3
+ uses: actions/upload-artifact@v4
  with:
  name: build-outputs
  path: app/build/outputs
 
  - name: Upload build reports
  if: always()
- uses: actions/upload-artifact@v3
+ uses: actions/upload-artifact@v4
  with:
  name: build-reports
  path: app/build/reports
 
  androidTest:
  needs: build
- runs-on: macOS-latest # enables hardware acceleration in the virtual machine
+ runs-on: macos-latest-large
  timeout-minutes: 55
  strategy:
  matrix:
- api-level: [26, 30]
+ api-level: [31, 34]
 
  steps:
  - name: Checkout
@@ -94,7 +94,7 @@ jobs:
 
  - name: Upload test reports
  if: always()
- uses: actions/upload-artifact@v3
+ uses: actions/upload-artifact@v4
  with:
  name: test-reports-${{ matrix.api-level }}
  path: '*/build/reports/androidTests'

app/build.gradle.kts

@@ -34,7 +34,7 @@ android {
 
  defaultConfig {
  applicationId = "com.example.platform.app"
- minSdk = 21
+ minSdk = 24
  targetSdk = 34
  versionCode = 1
  versionName = "1.0"

gradle/libs.versions.toml

@@ -18,7 +18,7 @@ accompanist = "0.32.0"
 androidx-datastore = "1.0.0"
 androidx-navigation = "2.7.7"
 androidx-window = "1.2.0"
-agp = "8.2.2"
+agp = "8.4.1"
 casa = "0.5.1"
 coil = "2.4.0"
 ksp = "1.9.22-1.0.17"

gradle/wrapper/gradle-wrapper.properties

@@ -17,6 +17,6 @@
 #Wed Dec 07 13:21:03 CET 2022
 distributionBase=GRADLE_USER_HOME
 distributionPath=wrapper/dists
-distributionUrl=https\://services.gradle.org/distributions/gradle-8.2-bin.zip
+distributionUrl=https\://services.gradle.org/distributions/gradle-8.6-bin.zip
 zipStoreBase=GRADLE_USER_HOME
 zipStorePath=wrapper/dists

samples/README.md

@@ -90,6 +90,8 @@ Shows Predictive Back animations.
 Add your custom tile to the Quick Settings.
 - [Receive data shared by other apps](user-interface/share/src/main/java/com/example/platform/ui/share/receiver/ShareReceiverActivity.kt):
 Receive texts and images from other apps.
+- [SaferIntents](security/intents/src/main/java/com/example/platform/security/intents/SaferIntents.kt):
+Example on how can fix the miss use of intents
 - [Scan with BLE Intent](connectivity/bluetooth/ble/src/main/java/com/example/platform/connectivity/bluetooth/ble/BLEScanIntentSample.kt):
 This samples shows how to use the BLE intent to scan for devices
 - [Screenshot Detection](privacy/transparency/src/main/java/com/example/platform/privacy/transparency/ScreenshotDetection.kt):

samples/security/intents/README.md

@@ -0,0 +1,10 @@
+# SaferIntents samples
+
+This sample shows that it is important to not have a NULL intent.
+It contains 2 buttons:
+
+- One button sends an NULL intent
+- Another button sends a regular intent
+
+It is important to note that for the NULL intent an exception handling has taken place.
+If an app sends a NULL intent it will crash with an `ActivityNotFound` exception

samples/security/intents/build.gradle.kts

@@ -0,0 +1,29 @@
+
+/*
+ * Copyright 2024 The Android Open Source Project
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ * https://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+
+plugins {
+ id("com.example.platform.sample")
+}
+
+android {
+ namespace = "com.example.platform.security.intents"
+}
+
+dependencies {
+ // Add samples specific dependencies
+}

samples/security/intents/src/main/AndroidManifest.xml

@@ -0,0 +1,27 @@
+<?xml version="1.0" encoding="utf-8"?><!--
+ ~ Copyright 2023 The Android Open Source Project
+ ~
+ ~ Licensed under the Apache License, Version 2.0 (the "License");
+ ~ you may not use this file except in compliance with the License.
+ ~ You may obtain a copy of the License at
+ ~
+ ~ https://www.apache.org/licenses/LICENSE-2.0
+ ~
+ ~ Unless required by applicable law or agreed to in writing, software
+ ~ distributed under the License is distributed on an "AS IS" BASIS,
+ ~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ ~ See the License for the specific language governing permissions and
+ ~ limitations under the License.
+ -->
+
+<manifest xmlns:android="http://schemas.android.com/apk/res/android">
+ <application>
+ <activity android:name=".SaferIntentsActivity"
+ android:exported="true">
+ <intent-filter>
+ <action android:name="com.example.platform.security.intents.MY_ACTION" />
+ <category android:name="android.intent.category.DEFAULT" />
+ </intent-filter>
+ </activity>
+ </application>
+</manifest>

samples/security/intents/src/main/java/com/example/platform/security/intents/SaferIntents.kt

@@ -0,0 +1,72 @@
+
+/*
+ * Copyright 2024 The Android Open Source Project
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ * https://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+
+package com.example.platform.security.intents
+
+import android.annotation.SuppressLint
+import android.content.ActivityNotFoundException
+import android.content.Intent
+import android.widget.Toast
+import androidx.compose.foundation.layout.Arrangement
+import androidx.compose.foundation.layout.Column
+import androidx.compose.foundation.layout.fillMaxSize
+import androidx.compose.foundation.layout.padding
+import androidx.compose.material3.Button
+import androidx.compose.material3.Text
+import androidx.compose.runtime.Composable
+import androidx.compose.ui.Alignment
+import androidx.compose.ui.Modifier
+import androidx.compose.ui.platform.LocalContext
+import androidx.compose.ui.unit.dp
+import com.google.android.catalog.framework.annotations.Sample
+
+@Sample(
+ name = "SaferIntents",
+ description = "Example on how can fix the miss use of intents"
+)
+@SuppressLint("IntentWithNullActionLaunch")
+@Composable
+fun SaferIntents() {
+ val context = LocalContext.current
+
+ Column (
+ modifier = Modifier
+ .fillMaxSize()
+ .padding(16.dp),
+ verticalArrangement = Arrangement.spacedBy(8.dp),
+ horizontalAlignment = Alignment.CenterHorizontally,
+ ){
+ Button(onClick = {
+ val intent = Intent()
+ try {
+ context.startActivity(intent)
+ } catch (e : ActivityNotFoundException) {
+ Toast.makeText(context, "Error: " + e.message, Toast.LENGTH_SHORT).show()
+ }
+ }) {
+ Text(text = "Send NULL Intent")
+ }
+
+ Button(onClick = {
+ val intent = Intent("com.example.platform.security.intents.MY_ACTION")
+ context.startActivity(intent)
+ }) {
+ Text(text = "Send Intent")
+ }
+ }
+}

samples/security/intents/src/main/java/com/example/platform/security/intents/SaferIntentsActivity.kt

@@ -0,0 +1,56 @@
+
+/*
+ * Copyright 2024 The Android Open Source Project
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ * https://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+package com.example.platform.security.intents
+
+import android.content.BroadcastReceiver
+import android.content.Context
+import android.content.Intent
+import android.os.Bundle
+import android.util.Log
+import android.widget.Toast
+import androidx.activity.ComponentActivity
+import androidx.activity.compose.setContent
+import androidx.compose.foundation.background
+import androidx.compose.foundation.layout.fillMaxSize
+import androidx.compose.material3.MaterialTheme
+import androidx.compose.material3.Surface
+import androidx.compose.material3.Text
+import androidx.compose.runtime.Composable
+import androidx.compose.ui.Modifier
+
+class SaferIntentsActivity : ComponentActivity() {
+ override fun onCreate(savedInstanceState: Bundle?) {
+ super.onCreate(savedInstanceState)
+ Toast.makeText(applicationContext, "Activity successfully created", Toast.LENGTH_SHORT).show()
+
+ setContent {
+ MaterialTheme {
+ Surface (
+ Modifier
+ .fillMaxSize()
+ .background(MaterialTheme.colorScheme.background)
+ ){
+ HelloAndroidScreen()
+ }
+ }
+ }
+ }
+}
+@Composable
+fun HelloAndroidScreen() {
+ Text(text = "Hello Android!")
+}