Add the WRITE_EXTERNAL_STORAGE dangerous permission
At some point Privacy Browser will add READ_EXTERNAL_STORAGE and WRITE_EXTERNAL_STORAGE permissions. These are classified as dangerous permissions. The concern is that a malicious website could leverage an vulnerability in Android's WebView to access and modify a device's file system.
For API >= 23 (Marshmallow, version 6.x) users can revoke this access if desired. For older versions of Android they cannot. As of 31 December 2016, 41.03% of standard installs and 52.31% of free installs through Google Play are for API <= 22.
There are important features that require these permissions, like https://redmine.stoutner.com/issues/1, https://redmine.stoutner.com/issues/23, and https://redmine.stoutner.com/issues/32. More discussion of the issue can be found at https://www.stoutner.com/downloaded-file-locations/.
The purpose of this feature request is to provide a place for users to voice their opinion as to whether Privacy Browser should add these permissions now or wait until a smaller percentage of the userbase is on API <= 22.
It is not possible to please everyone all the time, but I have a strong preference to follow the wishes of the majority of the users in cases like these.
#3 Updated by Soren Stoutner 8 months ago
- Status changed from New to In Progress
WRITE_EXTERNAL_STORAGE added in commit https://git.stoutner.com/?p=PrivacyBrowser.git;a=commitdiff;h=d420aa6be32a78b27905074edc3881a6e71d2263.
#4 Updated by Soren Stoutner 7 months ago
- Subject changed from Add the READ_EXTERNAL_STORAGE and WRITE_EXTERNAL_STORAGE dangerous permissions to Add the WRITE_EXTERNAL_STORAGE dangerous permission
- Status changed from In Progress to Closed
Adding the READ_EXTERNAL_STORAGE permission was split off to https://redmine.stoutner.com/issues/280.