google / google/android-security-lints
MissingAutoVerifyAttribute contradicts AppLinkUrlError rule
- Dominant language
- Kotlin
- Stars
- 168
- Forks
- 13
- PR merge metrics
- No merged PRs in 30d
Description
So we use Android lint shipped with AGP (currently `8.10.0`) and the lint checks provided by `com.android.security.lint:lint::1.0.3`.
Currently we use a custom scheme for intent filters in our app. This is intended and a requirement for us.
We get the following warning (from android.security.lint), because we do not set `autoVerify` attribute for this intent filter: [MissingAutoVerifyAttribute](https://googlesamples.github.io/android-custom-lint-rules/checks/MissingAutoVerifyAttribute.md.html)
When we add `autoVerify="true"` we run into this lint warning from AGP: [AppLinkUrlError](https://googlesamples.github.io/android-custom-lint-rules/checks/AppLinkUrlError.md.html)
> http(s) scheme and host attribute are missing, but are required for Android App Links
So not sure if makes sense that these rules somewhat contradict each other.
Contributor guide
Assessment
This issue has not been assessed yet.