zapstore-mirror/net.aliasvault.app
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Disable Android backup for all AliasVault app data (#1497)

Browse Source
This commit is contained in:
Leendert de Borst
2026-01-26 16:56:55 +00:00
committed by Leendert de Borst
parent 4a09f22d2c
commit 873ecc03f9
3 changed files with 7 additions and 32 deletions
Download Patch File Download Diff File Expand all files Collapse all files
apps/mobile-app/android/app/src/main/AndroidManifest.xml
+1 -1
View File
@@ -12,7 +12,7 @@
<data android:scheme="https"/>
</intent>
</queries>
<application android:name=".MainApplication" android:label="@string/app_name" android:icon="@mipmap/ic_launcher" android:roundIcon="@mipmap/ic_launcher_round" android:allowBackup="true" android:fullBackupContent="@xml/backup_rules" android:dataExtractionRules="@xml/data_extraction_rules" android:theme="@style/AppTheme" android:supportsRtl="true" android:usesCleartextTraffic="true" android:localeConfig="@xml/locales_config" android:networkSecurityConfig="@xml/network_security_config">
<application android:name=".MainApplication" android:label="@string/app_name" android:icon="@mipmap/ic_launcher" android:roundIcon="@mipmap/ic_launcher_round" android:allowBackup="false" android:fullBackupContent="false" android:dataExtractionRules="@xml/data_extraction_rules" android:theme="@style/AppTheme" android:supportsRtl="true" android:usesCleartextTraffic="true" android:localeConfig="@xml/locales_config" android:networkSecurityConfig="@xml/network_security_config">
<meta-data android:name="expo.modules.updates.ENABLED" android:value="false"/>
<meta-data android:name="expo.modules.updates.EXPO_UPDATES_CHECK_ON_LAUNCH" android:value="ALWAYS"/>
<meta-data android:name="expo.modules.updates.EXPO_UPDATES_LAUNCH_WAIT_MS" android:value="0"/>
apps/mobile-app/android/app/src/main/res/xml/backup_rules.xml
-18
View File
@@ -1,18 +0,0 @@
<?xml version="1.0" encoding="utf-8"?>
<!--
Backup rules for Android API < 31 (Android 11 and below).
Excludes sensitive credential identity data from device backups.
The credential_identities file stores user metadata (usernames, email addresses, service names)
that should not leave the device, matching iOS ASCredentialIdentityStore behavior which
explicitly excludes its data from device backups.
Security rationale:
- Contains sensitive user information (though no passwords)
- Should remain device-local for privacy
- Can be re-synced from vault on new device
-->
<full-backup-content>
<!-- Exclude the credential identity store from backups -->
<exclude domain="sharedpref" path="credential_identities.xml"/>
</full-backup-content>
apps/mobile-app/android/app/src/main/res/xml/data_extraction_rules.xml
+6 -13
View File
@@ -1,24 +1,17 @@
<?xml version="1.0" encoding="utf-8"?>
<!--
Data extraction rules for Android API 31+ (Android 12 and above).
Excludes sensitive credential identity data from cloud backups and device transfers.
Disables all cloud backups and device transfers.
The credential_identities file stores user metadata (usernames, email addresses, service names)
that should not leave the device, matching iOS ASCredentialIdentityStore behavior which
explicitly excludes its data from device backups.
Security rationale:
- Contains sensitive user information (though no passwords)
- Should remain device-local for privacy
- Can be re-synced from vault on new device
AliasVault is an end-to-end encrypted vault app. All app data — including the encrypted
vault database, Keystore-wrapped encryption keys, authentication tokens, and key derivation
parameters — is security-sensitive and device-bound. So backups are disabled entirely.
-->
<data-extraction-rules>
<cloud-backup>
<!-- Exclude credential identity store from cloud backups -->
<exclude domain="sharedpref" path="credential_identities.xml"/>
<exclude domain="root" path="."/>
</cloud-backup>
<device-transfer>
<!-- Exclude credential identity store from device-to-device transfers -->
<exclude domain="sharedpref" path="credential_identities.xml"/>
<exclude domain="root" path="."/>
</device-transfer>
</data-extraction-rules>