On Feb 15, 5:01 pm, Mark Murphy <mmur...@commonsware.com> wrote:
> jotobjects wrote:
> > Are the resources of the another application package essentially
> > public - can any application call Context.createPackageContext() to
> > get the context of a different application?
>
> Yes. It shocked the heck out of me when I realized it. It's possible
> there are some limits, but I'm not aware of any.

Getting resources is just the start. For instance with a Context you
can get lists of databases and files and delete them!  Seems a little
extreme for another package to be able to do that :)  Hopefully it's
not possible.  Even getting the names of files is potentially a
security issue.

Getting access to MetaData via PackageManager seems reasonable if you
are aware that this is how it works, but the rationale for getting the
Context of another package is not so clear - do you understand the
purpose?

-- 
You received this message because you are subscribed to the Google
Groups "Android Developers" group.
To post to this group, send email to android-developers@googlegroups.com
To unsubscribe from this group, send email to
android-developers+unsubscr...@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/android-developers?hl=en

Reply via email to