[Mobile Application]
Security Research Center
AccessibilityDataSensitive
Guardsquare recommended technique
Technique summary | |
Technique | AccessibilityDataSensitive API |
Against | Malicious accessibility services |
Limitations | API Level ≥ 34 (Android ≥14) |
Side effects | None |
Recommendations | Recommended for use combined with other techniques for older devices |
In Android 14, Google introduced the accessibilityDataSensitive property for Views. Any View with this property is visible only to the services that complete the Permission Declaration Form by Google.
This solution relies on restricting access to the protected app to API Level ≥ 34 (or Android 14+), which will take some time to be mainstream. Another approach will be required to cater to the users of older devices.
Example use:
Guardsquare
Connect with the author
Table of contents