We found that your app contains security vulnerabilities, which can expose user information or damage a user’s device. This is a violation of Device and Network Abuse policy. Specifically, your app(s) are vulnerable to Intent Redirection.

[chanchalkeypoint]

Checklist before submitting a bug report

• I've updated to the latest released version of the SDK
• I've searched for existing Github issues
• I've looked for existing answers on Stack Overflow, the Facebook Developer Community Forum and the Facebook Developers Group
• I've read the Code of Conduct
• This issue is not security related and can safely be disclosed publicly on GitHub

Java version

8.1

Android version

API 31

Android SDK version

31

Installation platform & version

https://services.gradle.org/distributions/gradle-6.5-bin.zip

Package

Login

Goals

Intent Redirection

Your app(s) are vulnerable to Intent Redirection.

com.facebook.CustomTabMainActivity.onCreate

Expected results

While using your SDK application should be accepted to play Store.

Actual results

Application Got Rejected From Play Store.
Since we are using FaceBook SDK.

Intent Redirection

Your app(s) are vulnerable to Intent Redirection.

com.facebook.CustomTabMainActivity.onCreate

Steps to reproduce

No response

Code samples & details

// INSERT YOUR CODE HERE

[KislayK]

Hi Team, I have also received the same from Google and my app was also rejected due to the same reasons. Do we have any solution to this yet?

@chanchalkeypoint did you find any solution for this issue?

[chanchalkeypoint]

Hi,
Remove "CustomTabMainActivity" from Manifest and add only "CustomTabActivity" keep exported as true.

@KislayK

[tomkoptel]

Hello,

I am using Android Gradle Plugin 8.6.0. I've received the lint report

Error: com.facebook.android:facebook-common version 17.0.1 has Device and Network Abuse policy issues that will block publishing of your app to Play Console in the future [PlaySdkIndexNonCompliant]

Any ideas on how to address this error?

[wiggisser]

I have the same issue with referencing com.facebook.android:facebook-login:17.0.2 We only use Login with Facebook and no other features of the SDK in our app.