alibaba / alibaba/flutter_boost

小米市场检测flutterboost获取传感器

Open
#1,747 3 comments 0 reactions 0 assignees View on GitHub
Dominant language
Dart
Stars
7.2k
Forks
1.3k
PR merge metrics
No merged PRs in 30d

Description

flutter 版本号 'v3.0-release.2'

APP向用户明示SDK的收集使用规则,但未见清晰明示SDK收集设备com.amap.api获取SD卡数据、io.flutter.embedding获取剪切板、io.flutter.plugins,io.flutter.embedding,**com.idlefish.flutterboost获取传感器**、com.loc.dt,com.loc.dn获取传感器等的目的方式范围,用户同意隐私政策后,SDK存在收集设com.amap.api获取SD卡数据、io.flutter.embedding获取剪切板、io.flutter.plugins,io.flutter.embedding,**com.idlefish.flutterboost获取传感器**、com.loc.dt,com.loc.dn获取传感器的行为。(存在风险)

Contributor guide

No contributing guide indexed for this repository

Research direction

The report names Flutter v3.0-release.2 and sensor access attributed to com.idlefish.flutterboost during Xiaomi market review, but identifies no source file or test. Start by reproducing the behavior with the stated version and tracing the plugin's sensor-related behavior; confirm the expected privacy disclosure or code change before defining done.

Written by the indexing model from the issue text.

Assessment

Tech stack
dart, flutter
Domain
mobile, security
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.