Summary
Static analysis found 1 exported activity without permission protection.
File: app/src/main/AndroidManifest.xml:29
Activity: TodoActivity with
External apps can launch this activity with crafted intents.
Fix: Add or validate intent extras in onCreate().
Scanner: semgrep 1.162.0 on proot-distro Ubuntu 25.10
Summary
Static analysis found 1 exported activity without permission protection.
File: app/src/main/AndroidManifest.xml:29
Activity: TodoActivity with
External apps can launch this activity with crafted intents.
Fix: Add or validate intent extras in onCreate().
Scanner: semgrep 1.162.0 on proot-distro Ubuntu 25.10