Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Can a rooted device access cached images using Coil? #245

Closed
DeepPSingh opened this issue Jan 15, 2020 · 5 comments
Closed

Can a rooted device access cached images using Coil? #245

DeepPSingh opened this issue Jan 15, 2020 · 5 comments

Comments

@DeepPSingh
Copy link

I am working on an app which needs to make sure that cached images are not accessible to anyone. I am using Coil to cache images on the disk.

Can someone who has a rooted device access cached images using Coil? This can be a security issue for us and if you have already done some testing on this area can you please let me know your findings?

Thanks in advance.

@colinrtwhite
Copy link
Member

I believe a rooted user will be able to access any folder on the device including the cache folder. This will be true of all image loaders.

@DeepPSingh
Copy link
Author

Thanks for the quick response. Is there a way we can restrict the user accessing it or encrypting and decrypting while saving and retrieving the cached file?

@colinrtwhite
Copy link
Member

@colinrtwhite
Copy link
Member

There's a feature request for encryption here.

@DeepPSingh
Copy link
Author

Ok thanks.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants