Add enhanced manifest analysis: permission, component, and intent filter security

Author: davideagostini

test-app/app/src/main/AndroidManifest.xml

@@ -1,7 +1,14 @@
 <?xml version="1.0" encoding="utf-8"?>
 <manifest xmlns:android="http://schemas.android.com/apk/res/android">
 
+    <!-- Dangerous permissions for testing -->
     <uses-permission android:name="android.permission.INTERNET" />
+    <uses-permission android:name="android.permission.ACCESS_FINE_LOCATION" />
+    <uses-permission android:name="android.permission.CAMERA" />
+    <uses-permission android:name="android.permission.READ_CONTACTS" />
+    <uses-permission android:name="android.permission.READ_SMS" />
+    <uses-permission android:name="android.permission.RECORD_AUDIO" />
+    <uses-permission android:name="android.permission.READ_CALL_LOG" />
 
     <application
         android:allowBackup="true"
@@ -17,7 +24,34 @@
                 <action android:name="android.intent.action.MAIN" />
                 <category android:name="android.intent.category.LAUNCHER" />
             </intent-filter>
+            <!-- Intent filter with data for testing -->
+            <intent-filter>
+                <action android:name="com.example.ACTION_VIEW" />
+                <category android:name="android.intent.category.DEFAULT" />
+                <data android:mimeType="text/plain" />
+            </intent-filter>
         </activity>
+
+        <!-- Exported Service without permission -->
+        <service
+            android:name=".MyService"
+            android:exported="true" />
+
+        <!-- Exported Broadcast Receiver without permission -->
+        <receiver
+            android:name=".MyReceiver"
+            android:exported="true">
+            <intent-filter>
+                <action android:name="com.example.ACTION_UPDATE" />
+            </intent-filter>
+        </receiver>
+
+        <!-- Exported Content Provider without permission -->
+        <provider
+            android:name=".MyProvider"
+            android:authorities="com.example.provider"
+            android:exported="true" />
+
     </application>
 
 </manifest>

test-app/build.gradle.kts

@@ -2,5 +2,4 @@
 plugins {
     id("com.android.application") version "8.2.2" apply false
     id("org.jetbrains.kotlin.android") version "1.9.22" apply false
-    id("com.davideagostini.analyzer") version "1.0.0" apply false
 }

test-app/settings.gradle.kts

@@ -4,6 +4,9 @@ pluginManagement {
         mavenCentral()
         gradlePluginPortal()
     }
+    includeBuild("../") {
+        name = "android-build-analyzer"
+    }
 }
 
 dependencyResolutionManagement {