diff options
author | Adrian Ludwig <aludwig@google.com> | 2011-12-15 15:37:33 -0800 |
---|---|---|
committer | Dirk Dougherty <ddougherty@google.com> | 2011-12-16 10:53:53 -0800 |
commit | a15562f8fd92d09f3277a0fabd0d54eff6e98b4f (patch) | |
tree | c04542c397ea266693a014a484264dee9e3a6c82 /docs/html/guide/practices | |
parent | 5b18c714bbff269d7db880b42de34fd1385da9f9 (diff) | |
download | frameworks_base-a15562f8fd92d09f3277a0fabd0d54eff6e98b4f.zip frameworks_base-a15562f8fd92d09f3277a0fabd0d54eff6e98b4f.tar.gz frameworks_base-a15562f8fd92d09f3277a0fabd0d54eff6e98b4f.tar.bz2 |
Updated "Designing for Security" documentation
Change-Id: I1fe5b353d750695f75370ef31ae1b39e50159164
Signed-off-by: Adrian Ludwig <aludwig@google.com>
Diffstat (limited to 'docs/html/guide/practices')
-rw-r--r-- | docs/html/guide/practices/security.jd | 11 |
1 files changed, 10 insertions, 1 deletions
diff --git a/docs/html/guide/practices/security.jd b/docs/html/guide/practices/security.jd index 5da7e98..476c301 100644 --- a/docs/html/guide/practices/security.jd +++ b/docs/html/guide/practices/security.jd @@ -552,7 +552,7 @@ the minimum functionality required by your application.</p> <p>If your application does not directly use JavaScript within a <code><a href="{@docRoot}reference/android/webkit/WebView.html">WebView</a></code>, do not call -<a href="{@docRoot}reference/android/webkit/WebSettings.html#setJavaScriptEnabled(boolean) +<a href="{@docRoot}reference/android/webkit/WebSettings.html#setJavaScriptEnabled(boolean)"> <code>setJavaScriptEnabled()</code></a>. We have seen this method invoked in sample code that might be repurposed in production application -- so remove it if necessary. By default, <code><a @@ -686,6 +686,15 @@ with personal information. This topic is discussed in more detail in the <a href="http://android-developers.blogspot.com/2011/03/identifying-app-installatio ns.html">Android Developer Blog</a>.</p> +<p>Application developers should be careful writing to on-device logs. +In Android, logs are a shared resource, and are available +to an application with the +<a href="{@docRoot}reference/android/Manifest.permission.html#READ_LOGS"> +<code>READ_LOGS</code></a> permission. Even though the phone log data +is temporary and erased on reboot, inappropriate logging of user information +could inadvertently leak user data to other applications.</p> + + <h3>Handling Credentials</h3> <p>In general, we recommend minimizing the frequency of asking for user |