google / google/android-security-lints

MissingAutoVerifyAttribute contradicts AppLinkUrlError rule

Open
#9 3 comments 0 reactions 0 assignees View on GitHub
Dominant language
Kotlin
Stars
168
Forks
13
PR merge metrics
No merged PRs in 30d

Description

So we use Android lint shipped with AGP (currently `8.10.0`) and the lint checks provided by `com.android.security.lint:lint::1.0.3`.

Currently we use a custom scheme for intent filters in our app. This is intended and a requirement for us.

We get the following warning (from android.security.lint), because we do not set `autoVerify` attribute for this intent filter: [MissingAutoVerifyAttribute](https://googlesamples.github.io/android-custom-lint-rules/checks/MissingAutoVerifyAttribute.md.html)

When we add `autoVerify="true"` we run into this lint warning from AGP: [AppLinkUrlError](https://googlesamples.github.io/android-custom-lint-rules/checks/AppLinkUrlError.md.html)

> http(s) scheme and host attribute are missing, but are required for Android App Links

So not sure if makes sense that these rules somewhat contradict each other.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.