guardianproject / guardianproject/haven

Should EditTexts (password field for example) be available to Oreo's Autofill service?

Open
#205 1 comment 0 reactions 0 assignees View on GitHub
Dominant language
Java
Stars
6.8k
Forks
752
PR merge metrics
No merged PRs in 30d

Description

I guess the subject says it, but in case anyone isn't familiar-- Android 8.x has a new feature called [Autofill](https://developer.android.com/guide/topics/text/autofill.html), which will let password managers or the system or whatever save passwords and other entries and then fill them automatically. (I don't know how the passwords are backed up or where)

Is this something haven wants to use? You can tell individual Views and their descendants not to participate from their XML declaration using `android:importantForAutofill="noExcludeDescendants"`. (see [here](https://developer.android.com/reference/android/R.styleable.html#View_importantForAutofill) and [it can be done in java too](https://developer.android.com/reference/android/view/View.html#setAutofillHints(java.lang.String...))). Also I think you can ask the AutofillManager to [stop getting autofill events](https://developer.android.com/reference/android/view/autofill/AutofillManager.html#unregisterCallback(android.view.autofill.AutofillManager.AutofillCallback)).

Anyway, just thought I'd point it out as a feature that has pluses and minuses. Thoughts?

Contributor guide

No contributing guide indexed for this repository

Research direction

The issue names no project files, tests, or entry points. Start by reviewing the linked Android Autofill documentation and locating the app’s password and other EditText views, then establish whether they should participate and document the agreed behavior before implementation.

Written by the indexing model from the issue text.

Assessment

Tech stack
android, java
Domain
mobile, security
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.