Setting exported to false in Notifee Core

[shubham-imoney]

An audit of our application which uses the Notifee library showed that app.notifee.core.NotificationRecieverActivity has exported set to true with no permission in AndroidManifest.xml. If i override this activity in my app AndroidManifest.xml and set it's exported to false, would this create any issues given that I use the notifee.displayNotification, notifee.onForegroundEvent and notifee.onBackgroundEvent functions.

I'm not too familiar with Android development so any input would be appreciated.

[mikehardy]

https://developer.android.com/guide/topics/manifest/receiver-element#exported

I believe - though please test it - that if you set it to not exported / exported == false, the app will still receive system broadcasts. I believe the restriction is just that inter-app communication with the receiver is blocked.

The point of the receiver is to receive notifications from the network, processed by the system and system-delivered to the app, so I think setting it to false will work fine.

If you test that and things work well for you, then this is something we may be able to change here so it is false to start. I think our intended use cases are supported well enough with it false assuming it works when you test it

[shubham-imoney]

https://developer.android.com/guide/topics/manifest/receiver-element#exported

I believe - though please test it - that if you set it to not exported / exported == false, the app will still receive system broadcasts. I believe the restriction is just that inter-app communication with the receiver is blocked.

The point of the receiver is to receive notifications from the network, processed by the system and system-delivered to the app, so I think setting it to false will work fine.

If you test that and things work well for you, then this is something we may be able to change here so it is false to start. I think our intended use cases are supported well enough with it false assuming it works when you test it

Okay. I'll test and get back in a day or two

[mikehardy]

@shubham-imoney how did the testing go? I think you are correct and this can likely be exported=false but I would love confirmation from testing besides myself if you have it also

[shubham-imoney]

@mikehardy Apologies for not replying. Based on the preliminary testing by setting exported to false, the functions that I had mentioned were working fine. But I did not do in depth testing of the other notifee functionality. You could let me know if there are any other Notifee functions you would want me to re-check?

[github-actions]

Hello 👋, to help manage issues we automatically close stale issues.

This issue has been automatically marked as stale because it has not had activity for quite some time.Has this issue been fixed, or does it still require attention?

This issue will be closed in 15 days if no further activity occurs.

Thank you for your contributions.

[mikehardy]

closer to being able to test the related PR #1132 after invertase/react-native-firebase#8143
will have it tested and be able to merge shortly