In order to mitigate the risk of "task hijacking", this documentation offers to update the allowCrossUidActivitySwitchFromBelow attribute in the app's AndroidManifest.xml file:
<application android:allowCrossUidActivitySwitchFromBelow="false" >
However, the documentation of the application tag doesn't contain this attribute. (Probably this is a hidden attribute).
In source code of ApplicationInfo it says
public boolean allowCrossUidActivitySwitchFromBelow = true;
Which probably means that the default value is true, unless overwritten via the Manifest.
What are the pros and cons of setting this attribute to false?
Can "task hijacking" be mitigated by android:exported="false" or android:allowTaskReparenting="false"?
No answer found for this question yet.