AndroidManifest.xml Security & Permission Linter
Android DevelopmentusesCleartextTraffic="true" permits insecure HTTP connections. Enforce HTTPS or configure network_security_config.xml.
allowBackup="true" lets adb backup extract sensitive private sqlite databases or preferences unless disabled or secured.
Scoped Storage is mandatory on Android 11+ (API 30+). Use MediaStore or Photo Picker instead of broad external storage.
Requires runtime permission prompt (ActivityCompat.requestPermissions) and Google Play privacy justification.
Ensure services, broadcast receivers, or activities with exported="true" have permission checks or are protected.
AndroidManifest.xml Security & Permission Linter
EssentialAudit AndroidManifest.xml for exported activities, cleartext HTTP traffic vulnerabilities, dangerous permissions, and Google Play compliance warnings.
How to Use AndroidManifest.xml Security & Permission Linter
Follow these simple steps to process your files securely in browser memory.
Paste AndroidManifest.xml
Paste manifest XML content or upload project manifest file.
Run Automated Security Audit
Scans for usesCleartextTraffic, unexported activities, and dangerous permissions.
Apply Hardening Snippets
Copy recommended fixes and secure your app before store submission.
Who Is AndroidManifest.xml Security & Permission Linter Built For?
Designed for professionals seeking fast, private, and unlimited client-side execution.
- Cleartext traffic vulnerability checks
- Exported component intent hijacking audits
- Google Play dangerous permissions scan
OWASP MASVS Checks
Flags high-risk attack surfaces instantly.
Store Rejection Prevention
Catch policy violations before Google Play review.
Actionable XML Fixes
Clear code snippets to secure every flagged component.
Frequently Asked Questions about AndroidManifest.xml Security & Permission Linter
Related Android Development Tools
Android App Icon Resizer & Mipmap Generator
Generate Android app icons in all standard densities (mdpi, hdpi, xhdpi, xxhdpi, xxxhdpi) and Google Play Store 512x512 with circular or squircle adaptive masks.
Android ProGuard & R8 Rules Generator
Generate clean ProGuard and R8 obfuscation and shrinking rules with 1-click presets for Retrofit, Gson, Room, Kotlin Coroutines, and Glide.
Android Keystore Fingerprint & Key Hash Studio
Compute Base64 App Signing Key Hashes for Facebook SDK, Google Sign-In, and Firebase from SHA-1 certificate fingerprints.