Find Android permissions / security smells
Recipe ID
org.openrewrite.kotlin.android.FindAndroidPermissionsSmells$KtRecipeArtifact
io.moderne.recipe:recipes-kotlinPermission-handling patterns the platform has deprecated: direct requestPermissions(...) calls and onRequestPermissionsResult overrides (use ActivityResultContracts.RequestPermission), and MODE_WORLD_READABLE / WORLD_WRITEABLE (use FileProvider).
Usage
This recipe has no required configuration options. You’ll need the Moderne CLI configured before running the command below.
mod run . --recipe org.openrewrite.kotlin.android.FindAndroidPermissionsSmells$KtRecipeIf the recipe isn’t available locally, install it with:
mod config recipes jar install io.moderne.recipe:recipes-kotlin:0.2.0Definition
This recipe runs the following recipes in order.
- Find direct
requestPermissions(...)callsorg.openrewrite.kotlin.android.FindRequestPermissions$KtRecipe - Find
onRequestPermissionsResultoverridesorg.openrewrite.kotlin.android.FindOnRequestPermissionsResultOverride$KtRecipe - Find
MODE_WORLD_READABLE/MODE_WORLD_WRITEABLEreferencesorg.openrewrite.kotlin.android.FindModeWorldReadable$KtRecipe - Find legacy
Intent.ACTION_PICK/ACTION_GET_CONTENTreferencesorg.openrewrite.kotlin.android.FindIntentActionGetContent$KtRecipe
Data tables
Structured output this recipe can produce.
- Source files that had resultsSource files that were modified by the recipe run.
org.openrewrite.table.SourcesFileResults - Source files that had search resultsSearch results that were found during the recipe run.
org.openrewrite.table.SearchResults - Source files that errored on a recipeThe details of all errors produced by a recipe run.
org.openrewrite.table.SourcesFileErrors - Recipe performanceStatistics used in analyzing the performance of recipes.
org.openrewrite.table.RecipeRunStats