组件安全
====

<table><tbody><tr><th class="firstcol" id="mcps1.3.1.1.3.1.1" valign="top" width="20%"><p>描述</p></th><td class="cellrowborder" valign="top" width="80%"><p>不对外交互的Ability的exported属性需要显式设置为false。</p></td></tr><tr><th class="firstcol" id="mcps1.3.1.1.3.2.1" valign="top" width="20%"><p>类型</p></th><td class="cellrowborder" valign="top" width="80%"><p>建议</p></td></tr><tr><th class="firstcol" id="mcps1.3.1.1.3.3.1" valign="top" width="20%"><p>适用设备</p></th><td class="cellrowborder" valign="top" width="80%"><p>手机，平板，PC/2in1，智慧屏，车机</p></td></tr><tr><th class="firstcol" id="mcps1.3.1.1.3.4.1" valign="top" width="20%"><p>应用形态适用性</p></th><td class="cellrowborder" valign="top" width="80%"><p>鸿蒙应用，鸿蒙元服务</p></td></tr><tr><th class="firstcol" id="mcps1.3.1.1.3.5.1" valign="top" width="20%"><p>说明</p></th><td class="cellrowborder" valign="top" width="80%"><p>实现方案参考<a href="https://developer.huawei.com/consumer/cn/doc/best-practices/bpta-harmony-application-security#section93277172115" target="_blank">最佳实践</a></p></td></tr></tbody></table>

<table><tbody><tr><th class="firstcol" id="mcps1.3.2.1.3.1.1" valign="top" width="20%"><p>描述</p></th><td class="cellrowborder" valign="top" width="80%"><p>对外交互的Ability应设置合理的访问权限。</p></td></tr><tr><th class="firstcol" id="mcps1.3.2.1.3.2.1" valign="top" width="20%"><p>类型</p></th><td class="cellrowborder" valign="top" width="80%"><p>建议</p></td></tr><tr><th class="firstcol" id="mcps1.3.2.1.3.3.1" valign="top" width="20%"><p>适用设备</p></th><td class="cellrowborder" valign="top" width="80%"><p>手机，平板，PC/2in1，智慧屏，车机</p></td></tr><tr><th class="firstcol" id="mcps1.3.2.1.3.4.1" valign="top" width="20%"><p>应用形态适用性</p></th><td class="cellrowborder" valign="top" width="80%"><p>鸿蒙应用，鸿蒙元服务</p></td></tr><tr><th class="firstcol" id="mcps1.3.2.1.3.5.1" valign="top" width="20%"><p>说明</p></th><td class="cellrowborder" valign="top" width="80%"><p>实现方案参考<a href="https://developer.huawei.com/consumer/cn/doc/best-practices/bpta-harmony-application-security#section16254131183715" target="_blank">最佳实践</a></p></td></tr></tbody></table>

<table><tbody><tr><th class="firstcol" id="mcps1.3.3.1.3.1.1" valign="top" width="20%"><p>描述</p></th><td class="cellrowborder" valign="top" width="80%"><p>DataShareExtensionAbility需要设置读写访问权限。</p></td></tr><tr><th class="firstcol" id="mcps1.3.3.1.3.2.1" valign="top" width="20%"><p>类型</p></th><td class="cellrowborder" valign="top" width="80%"><p>建议</p></td></tr><tr><th class="firstcol" id="mcps1.3.3.1.3.3.1" valign="top" width="20%"><p>适用设备</p></th><td class="cellrowborder" valign="top" width="80%"><p>手机，平板，PC/2in1，智慧屏，车机</p></td></tr><tr><th class="firstcol" id="mcps1.3.3.1.3.4.1" valign="top" width="20%"><p>应用形态适用性</p></th><td class="cellrowborder" valign="top" width="80%"><p>鸿蒙应用，鸿蒙元服务</p></td></tr><tr><th class="firstcol" id="mcps1.3.3.1.3.5.1" valign="top" width="20%"><p>说明</p></th><td class="cellrowborder" valign="top" width="80%"><p>无</p></td></tr></tbody></table>

<table><tbody><tr><th class="firstcol" id="mcps1.3.4.1.3.1.1" valign="top" width="20%"><p>描述</p></th><td class="cellrowborder" valign="top" width="80%"><p>动态公共事件接收器进行访问权限控制。</p></td></tr><tr><th class="firstcol" id="mcps1.3.4.1.3.2.1" valign="top" width="20%"><p>类型</p></th><td class="cellrowborder" valign="top" width="80%"><p>建议</p></td></tr><tr><th class="firstcol" id="mcps1.3.4.1.3.3.1" valign="top" width="20%"><p>适用设备</p></th><td class="cellrowborder" valign="top" width="80%"><p>手机，平板，PC/2in1，智慧屏，车机</p></td></tr><tr><th class="firstcol" id="mcps1.3.4.1.3.4.1" valign="top" width="20%"><p>应用形态适用性</p></th><td class="cellrowborder" valign="top" width="80%"><p>鸿蒙应用，鸿蒙元服务</p></td></tr><tr><th class="firstcol" id="mcps1.3.4.1.3.5.1" valign="top" width="20%"><p>说明</p></th><td class="cellrowborder" valign="top" width="80%"><p>实现方案参考<a href="https://developer.huawei.com/consumer/cn/doc/best-practices/bpta-harmony-application-security#section74546012413" target="_blank">最佳实践</a></p></td></tr></tbody></table>

<table><tbody><tr><th class="firstcol" id="mcps1.3.5.1.3.1.1" valign="top" width="20%"><p>描述</p></th><td class="cellrowborder" valign="top" width="80%"><p>静态公共事件接收器进行访问权限控制。</p></td></tr><tr><th class="firstcol" id="mcps1.3.5.1.3.2.1" valign="top" width="20%"><p>类型</p></th><td class="cellrowborder" valign="top" width="80%"><p>建议</p></td></tr><tr><th class="firstcol" id="mcps1.3.5.1.3.3.1" valign="top" width="20%"><p>适用设备</p></th><td class="cellrowborder" valign="top" width="80%"><p>手机，平板，PC/2in1，智慧屏，车机</p></td></tr><tr><th class="firstcol" id="mcps1.3.5.1.3.4.1" valign="top" width="20%"><p>应用形态适用性</p></th><td class="cellrowborder" valign="top" width="80%"><p>鸿蒙应用，鸿蒙元服务</p></td></tr><tr><th class="firstcol" id="mcps1.3.5.1.3.5.1" valign="top" width="20%"><p>说明</p></th><td class="cellrowborder" valign="top" width="80%"><p>无</p></td></tr></tbody></table>

<table><tbody><tr><th class="firstcol" id="mcps1.3.6.1.3.1.1" valign="top" width="20%"><p>描述</p></th><td class="cellrowborder" valign="top" width="80%"><p>未设置权限的公共事件不得携带个人数据。</p></td></tr><tr><th class="firstcol" id="mcps1.3.6.1.3.2.1" valign="top" width="20%"><p>类型</p></th><td class="cellrowborder" valign="top" width="80%"><p>建议</p></td></tr><tr><th class="firstcol" id="mcps1.3.6.1.3.3.1" valign="top" width="20%"><p>适用设备</p></th><td class="cellrowborder" valign="top" width="80%"><p>手机，平板，PC/2in1，智慧屏，车机</p></td></tr><tr><th class="firstcol" id="mcps1.3.6.1.3.4.1" valign="top" width="20%"><p>应用形态适用性</p></th><td class="cellrowborder" valign="top" width="80%"><p>鸿蒙应用，鸿蒙元服务</p></td></tr><tr><th class="firstcol" id="mcps1.3.6.1.3.5.1" valign="top" width="20%"><p>说明</p></th><td class="cellrowborder" valign="top" width="80%"><p>实现方案参考<a href="https://developer.huawei.com/consumer/cn/doc/best-practices/bpta-harmony-application-security#section190521394018" target="_blank">最佳实践</a></p></td></tr></tbody></table>

<table><tbody><tr><th class="firstcol" id="mcps1.3.7.1.3.1.1" valign="top" width="20%"><p>描述</p></th><td class="cellrowborder" valign="top" width="80%"><p>隐式启动Ability时不得携带严重级别数据。</p></td></tr><tr><th class="firstcol" id="mcps1.3.7.1.3.2.1" valign="top" width="20%"><p>类型</p></th><td class="cellrowborder" valign="top" width="80%"><p>建议</p></td></tr><tr><th class="firstcol" id="mcps1.3.7.1.3.3.1" valign="top" width="20%"><p>适用设备</p></th><td class="cellrowborder" valign="top" width="80%"><p>手机，平板，PC/2in1，智慧屏，车机</p></td></tr><tr><th class="firstcol" id="mcps1.3.7.1.3.4.1" valign="top" width="20%"><p>应用形态适用性</p></th><td class="cellrowborder" valign="top" width="80%"><p>鸿蒙应用，鸿蒙元服务</p></td></tr><tr><th class="firstcol" id="mcps1.3.7.1.3.5.1" valign="top" width="20%"><p>说明</p></th><td class="cellrowborder" valign="top" width="80%"><p>实现方案参考<a href="https://developer.huawei.com/consumer/cn/doc/best-practices/bpta-harmony-application-security#section143261097385" target="_blank">最佳实践</a></p></td></tr></tbody></table>

<table><tbody><tr><th class="firstcol" id="mcps1.3.8.1.3.1.1" valign="top" width="20%"><p>描述</p></th><td class="cellrowborder" valign="top" width="80%"><p>涉及敏感权限授权的应用界面需要防遮挡。</p></td></tr><tr><th class="firstcol" id="mcps1.3.8.1.3.2.1" valign="top" width="20%"><p>类型</p></th><td class="cellrowborder" valign="top" width="80%"><p>规则</p></td></tr><tr><th class="firstcol" id="mcps1.3.8.1.3.3.1" valign="top" width="20%"><p>适用设备</p></th><td class="cellrowborder" valign="top" width="80%"><p>手机，平板，PC/2in1，智慧屏，车机，穿戴</p></td></tr><tr><th class="firstcol" id="mcps1.3.8.1.3.4.1" valign="top" width="20%"><p>应用形态适用性</p></th><td class="cellrowborder" valign="top" width="80%"><p>鸿蒙应用，鸿蒙元服务</p></td></tr><tr><th class="firstcol" id="mcps1.3.8.1.3.5.1" valign="top" width="20%"><p>说明</p></th><td class="cellrowborder" valign="top" width="80%"><p>无</p></td></tr></tbody></table>

<table><tbody><tr><th class="firstcol" id="mcps1.3.9.1.3.1.1" valign="top" width="20%"><p>描述</p></th><td class="cellrowborder" valign="top" width="80%"><p>涉及口令输入、转账支付的应用界面需要防截屏。</p></td></tr><tr><th class="firstcol" id="mcps1.3.9.1.3.2.1" valign="top" width="20%"><p>类型</p></th><td class="cellrowborder" valign="top" width="80%"><p>规则</p></td></tr><tr><th class="firstcol" id="mcps1.3.9.1.3.3.1" valign="top" width="20%"><p>适用设备</p></th><td class="cellrowborder" valign="top" width="80%"><p>手机，平板，智慧屏，车机</p></td></tr><tr><th class="firstcol" id="mcps1.3.9.1.3.4.1" valign="top" width="20%"><p>应用形态适用性</p></th><td class="cellrowborder" valign="top" width="80%"><p>鸿蒙应用，鸿蒙元服务</p></td></tr><tr><th class="firstcol" id="mcps1.3.9.1.3.5.1" valign="top" width="20%"><p>说明</p></th><td class="cellrowborder" valign="top" width="80%"><p>实现方案参考<a href="https://developer.huawei.com/consumer/cn/doc/best-practices/bpta-harmony-application-security#section18516943133816" target="_blank">最佳实践</a></p></td></tr></tbody></table>