androidx.profileinstaller.ProfileInstallReceiver is found on release build with android:exported=”true”. Does it create any security issue?
When I analyze my Manifest file of my apk, I found that androidx.profileinstaller.ProfileInstallReceiver is added with android:exported=”true”. The receiver is not present on my merged manifest but it is found only on release Manifest file. How can I remove it from my rellease manifest file?. Does it create any issue if removed it from my manifest file? If I include it in my release manifest, does it create any security vulnerability?
You can find the code snippet below.