guardianproject / guardianproject/haven
Should EditTexts (password field for example) be available to Oreo's Autofill service?
- Dominant language
- Java
- Stars
- 6.8k
- Forks
- 752
- PR merge metrics
- No merged PRs in 30d
Description
I guess the subject says it, but in case anyone isn't familiar-- Android 8.x has a new feature called [Autofill](https://developer.android.com/guide/topics/text/autofill.html), which will let password managers or the system or whatever save passwords and other entries and then fill them automatically. (I don't know how the passwords are backed up or where)
Is this something haven wants to use? You can tell individual Views and their descendants not to participate from their XML declaration using `android:importantForAutofill="noExcludeDescendants"`. (see [here](https://developer.android.com/reference/android/R.styleable.html#View_importantForAutofill) and [it can be done in java too](https://developer.android.com/reference/android/view/View.html#setAutofillHints(java.lang.String...))). Also I think you can ask the AutofillManager to [stop getting autofill events](https://developer.android.com/reference/android/view/autofill/AutofillManager.html#unregisterCallback(android.view.autofill.AutofillManager.AutofillCallback)).
Anyway, just thought I'd point it out as a feature that has pluses and minuses. Thoughts?
Contributor guide
No contributing guide indexed for this repository
Research direction
The issue names no project files, tests, or entry points. Start by reviewing the linked Android Autofill documentation and locating the app’s password and other EditText views, then establish whether they should participate and document the agreed behavior before implementation.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- android, java
- Domain
- mobile, security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100