Of the choices given, which one identifies the app switcher screenshot vulnerability on iOS, and what API call should a developer make to mitigate it for screens displaying sensitive financial data?
- A.Declaring NSScreenCaptureUsageDescription in Info.plist suppresses the app switcher snapshot, and the system may substitute the launch storyboard in its place (the same substitution iOS uses for apps that decline photo library access), a change that typically needs no code in the scene delegate
- B.iOS captures no app switcher snapshot for a native application, and the exposure the auditor describes may exist on Android alone (FLAG_SECURE is the Android control), leaving a financial screen on iPhone with no overlay work that a typically cautious team would otherwise add
- C.When an app transitions to the background, iOS captures a screenshot of the current screen for the app switcher. Sensitive data (account numbers, balances) may be visible. The mitigation is to observe UIScene.willDeactivateNotification (or applicationWillResignActive) and overlay an opaque view or set the window to hidden before the snapshot is taken, then remove it in applicationDidBecomeActive