Component and intent security

Android components can become security boundaries. An exported component may be reachable by another application, so authorization and input validation matter.

• Inventory exported components.
• Check whether privileged actions require authorization.
• Validate Intent extras and URI inputs.
• Review content provider permissions and path handling.