AdWords is now Google Ads. Our new name reflects the full range of advertising options we offer across Search, Display, YouTube, and more. Learn more

Analytics
1.9K members online now
1.9K members online now
Dive into multiple domain (Cross/Sub) tracking, implementing Ecommerce and Enhanced Ecommerce, setting up Event tracking, and Universal Analytics code.
 
Guide Me
star_border
Reply

brodcaster permission for com.google.android.gms.analytics.ANALYTICS_DISPATCH

Visitor ✭ ✭ ✭
# 1
Visitor ✭ ✭ ✭

I recently did a code scan on my Android source code using HPFortify service. They reported security vulnerability regarding google analytics receiver. They suggested to use the broadcaster permission to reduce the attack vector. This way you are restricting broadcaster, otherwise any malicious application can send the intent and broadcast receiver will process it.

Here is my AndroidManifest file:

<receiver
      android:name="com.google.android.gms.analytics.AnalyticsReceiver"
      android:enabled="true">
          <intent-filter>
             <action android:name="com.google.android.gms.analytics.ANALYTICS_DISPATCH"/>
          </intent-filter>
   </receiver>
   <service
      android:name="com.google.android.gms.analytics.AnalyticsService"
      android:enabled="true"
      android:exported="false"/>

I am trying to figure out the broadcaster permission for AnalyticsReceiver. According to HpFortify the broadcast receiver should look like similar to this:

<receiver
   android:name="com.google.android.gms.analytics.AnalyticsReceiver"
   android:permission="SOME-GOOGLE-ANALYTICS-PERMISSION"
   android:enabled="true">
       <intent-filter>
          <action android:name="com.google.android.gms.analytics.ANALYTICS_DISPATCH"/>
        </intent-filter>
</receiver>

brodcaster permission for com.google.android.gms.analytics.ANALYTICS_DISPATCH

Visitor ✭ ✭ ✭
# 2
Visitor ✭ ✭ ✭

 Fada.hck mhcfxbjcgjatxdhc