安全分析报告： 相亲派 v2.1.8

安全分数


安全分数 46/100

风险评级


等级

  1. A
  2. B
  3. C
  4. F

严重性分布 (%)


隐私风险

3

用户/设备跟踪器


调研结果

高危 7
中危 57
信息 2
安全 2
关注 8

高危 基本配置不安全地配置为允许到所有域的明文流量。 

Scope:
*

高危 如果一个应用程序使用WebView.loadDataWithBaseURL方法来加载一个网页到WebView，那么这个应用程序可能会遭受跨站脚本攻击 

如果一个应用程序使用WebView.loadDataWithBaseURL方法来加载一个网页到WebView，那么这个应用程序可能会遭受跨站脚本攻击
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05h-Testing-Platform-Interaction.md#static-analysis-7

Files:
io/flutter/plugins/webviewflutter/WebViewHostApiImpl.java, line(s) 314,9,10

高危 SSL的不安全实现。信任所有证书或接受自签名证书是一个关键的安全漏洞。此应用程序易受MITM攻击 

SSL的不安全实现。信任所有证书或接受自签名证书是一个关键的安全漏洞。此应用程序易受MITM攻击
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05g-Testing-Network-Communication.md#android-network-apis

Files:
anet/channel/util/j.java, line(s) 10,11,12,3
com/alipay/android/phone/mrpc/core/b.java, line(s) 105,15,3
com/ta/a/b/f.java, line(s) 10,11,12,13,14,15,3

高危 应用程序使用带PKCS5/PKCS7填充的加密模式CBC。此配置容易受到填充oracle攻击。 

应用程序使用带PKCS5/PKCS7填充的加密模式CBC。此配置容易受到填充oracle攻击。
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#identifying-insecure-andor-deprecated-cryptographic-algorithms-mstg-crypto-4

Files:
org/android/agoo/common/a.java, line(s) 50

高危 使用弱加密算法 

使用弱加密算法
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#identifying-insecure-andor-deprecated-cryptographic-algorithms-mstg-crypto-4

Files:
com/heytap/mcssdk/utils/DESUtil.java, line(s) 15

高危 启用了调试配置。生产版本不能是可调试的 

启用了调试配置。生产版本不能是可调试的
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04c-Tampering-and-Reverse-Engineering.md#debugging-and-tracing

Files:
com/pushsdk/BuildConfig.java, line(s) 2,5

高危 不安全的Web视图实现。Web视图忽略SSL证书错误并接受任何SSL证书。此应用程序易受MITM攻击 

不安全的Web视图实现。Web视图忽略SSL证书错误并接受任何SSL证书。此应用程序易受MITM攻击
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05g-Testing-Network-Communication.md#webview-server-certificate-verification

Files:
com/flutter_webview_plugin/WebviewManager.java, line(s) 53,51

中危 应用程序存在Janus漏洞 

应用程序使用了v1签名方案进行签名，如果只使用v1签名方案，那么它就容易受到安卓5.0-8.0上的Janus漏洞的攻击。在安卓5.0-7.0上运行的使用了v1签名方案的应用程序，以及同时使用了v2/v3签名方案的应用程序也同样存在漏洞。

中危 基本配置配置为信任系统证书。 

Scope:
*

中危 应用程序可以安装在有漏洞的已更新 Android 版本上 

Android 5.0-5.0.2, [minSdk=21]
该应用程序可以安装在具有多个未修复漏洞的旧版本 Android 上。这些设备不会从 Google 接收合理的安全更新。支持 Android 版本 => 10、API 29 以接收合理的安全更新。

中危 应用程序数据存在被泄露的风险 

未设置[android:allowBackup]标志
这个标志 [android:allowBackup]应该设置为false。默认情况下它被设置为true，允许任何人通过adb备份你的应用程序数据。它允许已经启用了USB调试的用户从设备上复制应用程序数据。

中危 Activity (com.friends.fast.cloudpushdemo.component.ThirdPushPopupActivity) 未被保护。 

存在一个intent-filter。
发现 Activity与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Activity是显式导出的。

中危 Broadcast Receiver (com.friends.fast.cloudpushdemo.component.MyMessageReceiver) 未被保护。 

存在一个intent-filter。
发现 Broadcast Receiver与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Broadcast Receiver是显式导出的。

中危 Service (com.friends.fast.cloudpushdemo.component.MyMessageIntentService) 未被保护。 

存在一个intent-filter。
发现 Service与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Service是显式导出的。

中危 Service (cn.jpush.android.service.DaemonService) 未被保护。 

存在一个intent-filter。
发现 Service与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Service是显式导出的。

中危 Broadcast Receiver (cn.jpush.android.service.PushReceiver) 未被保护。 

存在一个intent-filter。
发现 Broadcast Receiver与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Broadcast Receiver是显式导出的。

中危 Activity设置了TaskAffinity属性 

(com.jarvan.fluwx.wxapi.FluwxWXEntryActivity)
如果设置了 taskAffinity，其他应用程序可能会读取发送到属于另一个任务的 Activity 的 Intent。为了防止其他应用程序读取发送或接收的 Intent 中的敏感信息，请始终使用默认设置，将 affinity 保持为包名

中危 Activity设置了TaskAffinity属性 

(com.friends.fast.wxapi.WXEntryActivity)
如果设置了 taskAffinity，其他应用程序可能会读取发送到属于另一个任务的 Activity 的 Intent。为了防止其他应用程序读取发送或接收的 Intent 中的敏感信息，请始终使用默认设置，将 affinity 保持为包名

中危 Broadcast Receiver (com.dexterous.flutterlocalnotifications.ScheduledNotificationBootReceiver) 未被保护。 

存在一个intent-filter。
发现 Broadcast Receiver与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Broadcast Receiver是显式导出的。

中危 Activity (com.tencent.tauth.AuthActivity) 未被保护。 

存在一个intent-filter。
发现 Activity与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Activity是显式导出的。

中危 Broadcast Receiver (androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy) 未被保护。 

存在一个intent-filter。
发现 Broadcast Receiver与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Broadcast Receiver是显式导出的。

中危 Broadcast Receiver (androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy) 未被保护。 

存在一个intent-filter。
发现 Broadcast Receiver与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Broadcast Receiver是显式导出的。

中危 Broadcast Receiver (androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy) 未被保护。 

存在一个intent-filter。
发现 Broadcast Receiver与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Broadcast Receiver是显式导出的。

中危 Broadcast Receiver (androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy) 未被保护。 

存在一个intent-filter。
发现 Broadcast Receiver与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Broadcast Receiver是显式导出的。

中危 Broadcast Receiver (androidx.work.impl.background.systemalarm.RescheduleReceiver) 未被保护。 

存在一个intent-filter。
发现 Broadcast Receiver与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Broadcast Receiver是显式导出的。

中危 Broadcast Receiver (androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver) 未被保护。 

存在一个intent-filter。
发现 Broadcast Receiver与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Broadcast Receiver是显式导出的。

中危 Broadcast Receiver (androidx.work.impl.diagnostics.DiagnosticsReceiver) 受权限保护, 但是应该检查权限的保护级别。 

Permission: android.permission.DUMP [android:exported=true]
发现一个 Broadcast Receiver被共享给了设备上的其他应用程序，因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此，应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险，一个恶意应用程序可以请求并获得这个权限，并与该组件交互。如果它被设置为签名，只有使用相同证书签名的应用程序才能获得这个权限。

中危 Activity (cn.jpush.android.ui.PopWinActivity) 未被保护。 

存在一个intent-filter。
发现 Activity与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Activity是显式导出的。

中危 Activity (cn.jpush.android.ui.PushActivity) 未被保护。 

存在一个intent-filter。
发现 Activity与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Activity是显式导出的。

中危 Service (cn.jpush.android.service.PushService) 未被保护。 

存在一个intent-filter。
发现 Service与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Service是显式导出的。

中危 Activity (cn.jpush.android.service.DActivity) 未被保护。 

存在一个intent-filter。
发现 Activity与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Activity是显式导出的。

中危 Activity (cn.jpush.android.service.JNotifyActivity) 未被保护。 

存在一个intent-filter。
发现 Activity与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Activity是显式导出的。

中危 Activity (cn.android.service.JTransitActivity) 未被保护。 

存在一个intent-filter。
发现 Activity与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Activity是显式导出的。

中危 Service (com.alibaba.sdk.android.push.huawei.HuaweiPushMessageService) 未被保护。 

存在一个intent-filter。
发现 Service与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Service是显式导出的。

中危 Broadcast Receiver (com.xiaomi.push.service.receivers.NetworkStatusReceiver) 未被保护。 

存在一个intent-filter。
发现 Broadcast Receiver与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Broadcast Receiver是显式导出的。

中危 Broadcast Receiver (com.xiaomi.push.service.receivers.PingReceiver) 未被保护。 

存在一个intent-filter。
发现 Broadcast Receiver与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Broadcast Receiver是显式导出的。

中危 Broadcast Receiver (com.alibaba.sdk.android.push.MiPushBroadcastReceiver) 未被保护。 

存在一个intent-filter。
发现 Broadcast Receiver与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Broadcast Receiver是显式导出的。

中危 Service (com.heytap.msp.push.service.CompatibleDataMessageCallbackService) 受权限保护, 但是应该检查权限的保护级别。 

Permission: com.coloros.mcs.permission.SEND_MCS_MESSAGE [android:exported=true]
发现一个 Service被共享给了设备上的其他应用程序，因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此，应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险，一个恶意应用程序可以请求并获得这个权限，并与该组件交互。如果它被设置为签名，只有使用相同证书签名的应用程序才能获得这个权限。

中危 Service (com.heytap.msp.push.service.DataMessageCallbackService) 受权限保护, 但是应该检查权限的保护级别。 

Permission: com.heytap.mcs.permission.SEND_PUSH_MESSAGE [android:exported=true]
发现一个 Service被共享给了设备上的其他应用程序，因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此，应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险，一个恶意应用程序可以请求并获得这个权限，并与该组件交互。如果它被设置为签名，只有使用相同证书签名的应用程序才能获得这个权限。

中危 Broadcast Receiver (com.alibaba.sdk.android.push.impl.PushMessageReceiverImpl) 未被保护。 

存在一个intent-filter。
发现 Broadcast Receiver与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Broadcast Receiver是显式导出的。

中危 Broadcast Receiver (com.alibaba.sdk.android.push.MeizuPushReceiver) 未被保护。 

存在一个intent-filter。
发现 Broadcast Receiver与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Broadcast Receiver是显式导出的。

中危 Broadcast Receiver (com.meizu.cloud.pushsdk.MzPushSystemReceiver) 受权限保护, 但是应该检查权限的保护级别。 

Permission: com.meizu.flyme.permission.PUSH [android:exported=true]
发现一个 Broadcast Receiver被共享给了设备上的其他应用程序，因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此，应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险，一个恶意应用程序可以请求并获得这个权限，并与该组件交互。如果它被设置为签名，只有使用相同证书签名的应用程序才能获得这个权限。

中危 Broadcast Receiver (androidx.profileinstaller.ProfileInstallReceiver) 受权限保护, 但是应该检查权限的保护级别。 

Permission: android.permission.DUMP [android:exported=true]
发现一个 Broadcast Receiver被共享给了设备上的其他应用程序，因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此，应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险，一个恶意应用程序可以请求并获得这个权限，并与该组件交互。如果它被设置为签名，只有使用相同证书签名的应用程序才能获得这个权限。

中危 Activity (com.sina.weibo.sdk.share.ShareTransActivity) 未被保护。 

存在一个intent-filter。
发现 Activity与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Activity是显式导出的。

中危 Service (org.android.agoo.accs.AgooService) 未被保护。 

存在一个intent-filter。
发现 Service与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Service是显式导出的。

中危 Service (com.aliyun.ams.emas.push.AgooInnerService) 未被保护。 

存在一个intent-filter。
发现 Service与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Service是显式导出的。

中危 Service (com.aliyun.ams.emas.push.MsgService) 未被保护。 

存在一个intent-filter。
发现 Service与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Service是显式导出的。

中危 Activity (com.aliyun.ams.emas.push.NotificationActivity) 未被保护。 

存在一个intent-filter。
发现 Activity与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Activity是显式导出的。

中危 Service (com.huawei.hms.support.api.push.service.HmsMsgService) 未被保护。 

存在一个intent-filter。
发现 Service与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Service是显式导出的。

中危 Service (com.taobao.accs.ChannelService) 未被保护。 

存在一个intent-filter。
发现 Service与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Service是显式导出的。

中危 Service (com.taobao.accs.data.MsgDistributeService) 未被保护。 

存在一个intent-filter。
发现 Service与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Service是显式导出的。

中危 Broadcast Receiver (com.taobao.accs.EventReceiver) 未被保护。 

存在一个intent-filter。
发现 Broadcast Receiver与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Broadcast Receiver是显式导出的。

中危 Broadcast Receiver (com.taobao.accs.ServiceReceiver) 未被保护。 

存在一个intent-filter。
发现 Broadcast Receiver与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Broadcast Receiver是显式导出的。

中危 高优先级的Intent (1000) 

[android:priority]
通过设置一个比另一个Intent更高的优先级，应用程序有效地覆盖了其他请求。

中危 文件可能包含硬编码的敏感信息，如用户名、密码、密钥等 

文件可能包含硬编码的敏感信息，如用户名、密码、密钥等
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#checking-memory-for-sensitive-data-mstg-storage-10

Files:
anet/channel/strategy/dispatch/DispatchConstants.java, line(s) 7
anetwork/channel/util/RequestConstant.java, line(s) 3
com/bumptech/glide/load/Option.java, line(s) 73
com/bumptech/glide/load/engine/DataCacheKey.java, line(s) 33
com/bumptech/glide/load/engine/EngineResource.java, line(s) 90
com/bumptech/glide/load/engine/ResourceCacheKey.java, line(s) 80
com/bumptech/glide/manager/RequestManagerRetriever.java, line(s) 36
com/dexterous/flutterlocalnotifications/FlutterLocalNotificationsPlugin.java, line(s) 111
com/dexterous/flutterlocalnotifications/models/NotificationDetails.java, line(s) 47,61
com/fluttercandies/photo_manager/core/entity/filter/FilterCond.java, line(s) 13,14,15
com/fluttercandies/photo_manager/core/entity/filter/OrderByCond.java, line(s) 57
com/friends/fast/cloudpushdemo/component/MyMessageReceiver.java, line(s) 16
com/heytap/mcssdk/constant/IntentConstant.java, line(s) 4,6
com/heytap/mcssdk/constant/PushConstant.java, line(s) 7,5
com/heytap/msp/push/encrypt/AESEncrypt.java, line(s) 13
com/tekartik/sqflite/Constant.java, line(s) 54
com/tencent/rtmp/TXVodPlayer.java, line(s) 684
com/tencent/ugc/MediaExtractorWrapper.java, line(s) 115,127,139
com/zhy/http/okhttp/builder/PostFormBuilder.java, line(s) 47
io/flutter/app/FlutterActivityDelegate.java, line(s) 31
io/flutter/embedding/android/FlutterActivityAndFragmentDelegate.java, line(s) 26,27
io/flutter/embedding/android/FlutterActivityLaunchConfigs.java, line(s) 14,16,17,3,4,15
io/flutter/embedding/engine/loader/ApplicationInfoLoader.java, line(s) 14,13
io/flutter/embedding/engine/loader/FlutterLoader.java, line(s) 32,37,35,36,39,40,38,41,44
io/flutter/embedding/engine/systemchannels/SettingsChannel.java, line(s) 11
io/flutter/plugin/editing/SpellCheckPlugin.java, line(s) 15,17,18
io/flutter/plugins/imagepicker/ImagePickerCache.java, line(s) 23,24,13,25,26,27,28,29
org/android/agoo/common/AgooConstants.java, line(s) 59
org/android/agoo/common/Config.java, line(s) 15
org/android/spdy/SpdyProtocol.java, line(s) 42

中危 应用程序使用不安全的随机数生成器 

应用程序使用不安全的随机数生成器
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#weak-random-number-generators

Files:
anet/channel/appmonitor/a.java, line(s) 24
anet/channel/bytes/a.java, line(s) 5
anet/channel/strategy/dispatch/a.java, line(s) 7
anet/channel/strategy/dispatch/b.java, line(s) 31
com/aliyun/ams/emas/push/h.java, line(s) 9
com/aliyun/ams/emas/push/notification/a.java, line(s) 14
com/otaliastudios/transcoder/stretch/InsertAudioStretcher.java, line(s) 4
com/ryanheise/just_audio/AudioPlayer.java, line(s) 66
com/ta/utdid2/a/a/c.java, line(s) 5
com/ta/utdid2/device/d.java, line(s) 12
com/xuexiang/xupdate/utils/ColorUtils.java, line(s) 6
org/android/spdy/SpdyBytePool.java, line(s) 3

中危 SHA-1是已知存在哈希冲突的弱哈希 

SHA-1是已知存在哈希冲突的弱哈希
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#identifying-insecure-andor-deprecated-cryptographic-algorithms-mstg-crypto-4

Files:
com/github/gzuliyujiang/oaid/impl/OppoImpl.java, line(s) 71
com/ta/utdid2/device/d.java, line(s) 151
com/weibo/ssosdk/oaid/helpers/OppoDeviceIDHelper.java, line(s) 65
com/weibo/ssosdk/oaid/impl/OppoImpl.java, line(s) 60
dev/fluttercommunity/plus/packageinfo/PackageInfoPlugin.java, line(s) 144
org/android/agoo/common/a.java, line(s) 74
org/repackage/a/a/a/a/c.java, line(s) 57

中危 MD5是已知存在哈希冲突的弱哈希 

MD5是已知存在哈希冲突的弱哈希
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#identifying-insecure-andor-deprecated-cryptographic-algorithms-mstg-crypto-4

Files:
anet/channel/util/StringUtils.java, line(s) 40
com/ta/a/c/b.java, line(s) 26
com/xuexiang/xupdate/utils/Md5Utils.java, line(s) 19
org/android/agoo/common/a.java, line(s) 63

中危 应用程序可以读取/写入外部存储器，任何应用程序都可以读取写入外部存储器的数据 

应用程序可以读取/写入外部存储器，任何应用程序都可以读取写入外部存储器的数据
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#external-storage

Files:
anetwork/channel/download/DownloadManager.java, line(s) 541,566
com/example/imagegallerysaver/ImageGallerySaverPlugin.java, line(s) 129
com/example/video_compress/ThumbnailUtility.java, line(s) 42
com/example/video_compress/Utility.java, line(s) 181
com/example/video_compress/VideoCompressPlugin.java, line(s) 149
com/flutter_webview_plugin/WebviewManager.java, line(s) 270
com/fluttercandies/photo_manager/core/utils/IDBUtils.java, line(s) 471,550
com/github/gzuliyujiang/oaid/DeviceID.java, line(s) 242,243
com/tencent/rtmp/downloader/a/d.java, line(s) 42
com/tencent/ugc/TXVideoEditer.java, line(s) 1506
com/weibo/ssosdk/MfpBuilder.java, line(s) 698
com/xuexiang/xupdate/utils/FileUtils.java, line(s) 228,232,236,240
com/xuexiang/xupdate/utils/UpdateUtils.java, line(s) 213
com/yalantis/ucrop/util/FileUtils.java, line(s) 90
io/flutter/plugins/pathprovider/Messages.java, line(s) 124,146,202,223
io/flutter/plugins/pathprovider/PathProviderPlugin.java, line(s) 89,206
vn/hunghd/flutter/plugins/imagecropper/FileUtils.java, line(s) 31

中危 应用程序创建临时文件。敏感信息永远不应该被写进临时文件 

应用程序创建临时文件。敏感信息永远不应该被写进临时文件


Files:
com/example/flutternativeimage/MethodCallHandlerImpl.java, line(s) 56,122
com/flutter_webview_plugin/WebviewManager.java, line(s) 270
com/jarvan/fluwx/io/ImagesIOIml.java, line(s) 49
com/llfbandit/record/MethodCallHandlerImpl.java, line(s) 280
io/flutter/plugins/imagepicker/ImagePickerDelegate.java, line(s) 385
vn/hunghd/flutter/plugins/imagecropper/FileUtils.java, line(s) 107

中危 应用程序使用SQLite数据库并执行原始SQL查询。原始SQL查询中不受信任的用户输入可能会导致SQL注入。敏感信息也应加密并写入数据库 

应用程序使用SQLite数据库并执行原始SQL查询。原始SQL查询中不受信任的用户输入可能会导致SQL注入。敏感信息也应加密并写入数据库
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04h-Testing-Code-Quality.md#injection-flaws-mstg-arch-2-and-mstg-platform-2

Files:
com/tekartik/sqflite/Database.java, line(s) 9,10,11,12,13,461
org/android/agoo/message/MessageService.java, line(s) 5,6,190

中危 IP地址泄露 

IP地址泄露


Files:
anet/channel/detect/ExceptionDetector.java, line(s) 70,70
com/alipay/android/phone/mrpc/core/q.java, line(s) 302
org/android/spdy/SpdyAgent.java, line(s) 344
org/android/spdy/SpdyRequest.java, line(s) 27,53,72,95,120,140,166,185,208,233

中危 应用程序包含隐私跟踪程序 

此应用程序有多个3隐私跟踪程序。跟踪器可以跟踪设备或用户，是终端用户的隐私问题。

中危 此应用可能包含硬编码机密信息 

从应用程序中识别出以下机密确保这些不是机密或私人信息
A2B55680-6F43-11E0-9A3F-0002A5D5C51B
03926990816987241548078304229099
9A04F079-9840-4286-AB92-E65BE0885F95
16a09e667f3bcc908b2fb1366ea957d3e3adec17512775099da2f590b0667322a
QrMgt8GGYI6T52ZY5AnhtxkLzb8egpFn
5adc8acaa40fa3746f000222
5OLKTx2iU5mko18DfdwK5611JIjbUhE
VGhpcyBpcyB0aGUgcHJlZml4IGZvciBCaWdJbnRlZ2Vy
QrMgt8GGYI6T52ZY5AnhtxkLzb8egpFn3j5JELI8H6wtACbUnZ5cc3aYTsTRbmkAkRJeYbtx92LPBWm7nBO9UIl7y5i5MQNmUZNf5QENurR5tGyo7yJ2G0MBjWvy6iAtlAbacKP0SwOUeUWx5dsBdyhxa7Id1APtybSdDgicBDuNjI0mlZFUzZSS9dmN8lBD0WTVOMz0pRZbR3cysomRXOO1ghqjJdTcyDIxzpNAEszN8RMGjrzyU7Hjbmwi6YNK
Y29tLm1jcy5hY3Rpb24uUkVDRUlWRV9TREtfTUVTU0FHRQ==
9Cac56C77a3Ef342B18cFdB20D259118

信息 应用程序记录日志信息,不得记录敏感信息 

应用程序记录日志信息,不得记录敏感信息
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#logs

Files:
anet/channel/AccsSessionManager.java, line(s) 57,75,48,56
anet/channel/AwcnConfig.java, line(s) 188,261
anet/channel/Config.java, line(s) 97
anet/channel/GlobalAppRuntimeInfo.java, line(s) 43
anet/channel/Session.java, line(s) 133,184,186
anet/channel/SessionCenter.java, line(s) 335,339,382,386,527,53,83,97,100,150,244,247,250,253,322,366,421,523,548,569,134,143,241,428,437,468,469,474,475,542,567,575,347,391
anet/channel/SessionRequest.java, line(s) 127,136,138,159,185,192,194,213,249,258,314,343,356,431,487,503,508,89,115,334,351,353,407,555,576,585,158,166,212,220,248,257,430,468
anet/channel/TaobaoNetworkAdapter.java, line(s) 42,57,77,85,45
anet/channel/a.java, line(s) 25
anet/channel/a/a.java, line(s) 22
anet/channel/a/b.java, line(s) 17
anet/channel/appmonitor/a.java, line(s) 95,109,98,134,79,94,108,123,124
anet/channel/b.java, line(s) 28,35
anet/channel/b/a.java, line(s) 48,64,78,92,25
anet/channel/c/a.java, line(s) 38,60,68,31,45,54
anet/channel/d/a.java, line(s) 63
anet/channel/detect/ExceptionDetector.java, line(s) 52,92,100,45
anet/channel/detect/c.java, line(s) 39
anet/channel/detect/d.java, line(s) 36,50,169,84,110,141,147
anet/channel/detect/e.java, line(s) 16
anet/channel/detect/f.java, line(s) 20
anet/channel/detect/h.java, line(s) 35
anet/channel/detect/i.java, line(s) 28
anet/channel/detect/k.java, line(s) 72,34,37,49,106
anet/channel/detect/m.java, line(s) 21
anet/channel/detect/n.java, line(s) 21,15
anet/channel/e/a.java, line(s) 42,45,50,57,59,75,83,40
anet/channel/f.java, line(s) 25,33,37
anet/channel/fulltrace/a.java, line(s) 33,48,61
anet/channel/g.java, line(s) 18
anet/channel/h.java, line(s) 24,41,32
anet/channel/heartbeat/b.java, line(s) 55,60,70,26,36,54
anet/channel/monitor/a.java, line(s) 27
anet/channel/monitor/b.java, line(s) 81,63,80,65
anet/channel/monitor/d.java, line(s) 54,53,61
anet/channel/request/Request.java, line(s) 415,418
anet/channel/request/b.java, line(s) 18
anet/channel/request/c.java, line(s) 29,26
anet/channel/security/b.java, line(s) 55,74,92,110
anet/channel/session/TnetSpdySession.java, line(s) 186,392,406,665,684,209,249,266,269,272,303,325,352,358,422,426,429,431,469,482,487,510,516,522,538,542,555,565,580,605,624,646,692,158,159,160,161,185,229,391,405,467,493,494,511,613,664,683,758,759
anet/channel/session/b.java, line(s) 100,113,124,147,154,160,166,171,181,187,193,199,205,211,216,222,245,247,253,263,265,271,301,318,323,330,340,351,385,406,471,508,513,519,533,556,88,90,91,92,284,285,293,479,480,487,488,551
anet/channel/session/d.java, line(s) 64,59
anet/channel/session/g.java, line(s) 19,20
anet/channel/session/h.java, line(s) 20
anet/channel/session/i.java, line(s) 21
anet/channel/session/j.java, line(s) 30,25,26
anet/channel/statist/SessionStatistic.java, line(s) 131,130
anet/channel/status/NetworkStatusHelper.java, line(s) 197
anet/channel/status/a.java, line(s) 23
anet/channel/status/b.java, line(s) 53,97,71,106,146,263,52,113,136,141
anet/channel/status/c.java, line(s) 18,25
anet/channel/strategy/StrategyCollection.java, line(s) 89
anet/channel/strategy/StrategyConfig.java, line(s) 80,81,79
anet/channel/strategy/StrategyInfoHolder.java, line(s) 61
anet/channel/strategy/StrategyList.java, line(s) 74
anet/channel/strategy/StrategyTable.java, line(s) 150,157,257,124,250,262,266,73,118,146,191,256
anet/channel/strategy/a.java, line(s) 24,23,50,65
anet/channel/strategy/b.java, line(s) 33,43,32,42
anet/channel/strategy/d.java, line(s) 19,22,50
anet/channel/strategy/dispatch/AmdcRuntimeInfo.java, line(s) 24
anet/channel/strategy/dispatch/HttpDispatcher.java, line(s) 52,55,56
anet/channel/strategy/dispatch/a.java, line(s) 71,22,65
anet/channel/strategy/dispatch/b.java, line(s) 172,177,222,188,203,215,232,248,254,267,278,284,290,303,308,317,339,362,397,435,152,171,176,221,262
anet/channel/strategy/dispatch/d.java, line(s) 19,24,121
anet/channel/strategy/g.java, line(s) 79,105,132,146,213,43,95,108,162,170,225,35,41,104,145,156,232,202
anet/channel/strategy/h.java, line(s) 17,23
anet/channel/strategy/l.java, line(s) 14
anet/channel/strategy/m.java, line(s) 26,33,44,36,63,79,66
anet/channel/strategy/utils/a.java, line(s) 29,37
anet/channel/strategy/utils/b.java, line(s) 15
anet/channel/strategy/utils/c.java, line(s) 138
anet/channel/thread/ThreadPoolExecutorFactory.java, line(s) 70,50,69
anet/channel/util/ALog.java, line(s) 57,77,82,62,113,67,72
anet/channel/util/AppLifecycle.java, line(s) 134,68,120
anet/channel/util/HMacUtil.java, line(s) 14
anet/channel/util/SerializeHelper.java, line(s) 45,74,95,134,132,173,193,196,174,197
anet/channel/util/Utils.java, line(s) 98,110,115,135,177,161
anet/channel/util/c.java, line(s) 137,143,188,224,226,233,130,250,280
anet/channel/util/e.java, line(s) 21
anet/channel/util/j.java, line(s) 88,62,63,87,83
anetwork/channel/aidl/NetworkResponse.java, line(s) 129
anetwork/channel/aidl/NetworkService.java, line(s) 36,37
anetwork/channel/aidl/ParcelableHeader.java, line(s) 53
anetwork/channel/aidl/ParcelableRequest.java, line(s) 106,137
anetwork/channel/aidl/adapter/ParcelableFutureResponse.java, line(s) 58
anetwork/channel/aidl/adapter/ParcelableNetworkListenerWrapper.java, line(s) 60,69,75,85,89,59,68,74,84
anetwork/channel/aidl/adapter/a.java, line(s) 37,47,57,73,89
anetwork/channel/aidl/adapter/b.java, line(s) 103,167,43,60,85,111,112,121,156,158
anetwork/channel/aidl/adapter/d.java, line(s) 44,67,36,38,40,54,55
anetwork/channel/aidl/adapter/e.java, line(s) 11,12,23,24
anetwork/channel/aidl/adapter/f.java, line(s) 9
anetwork/channel/cache/CacheManager.java, line(s) 98
anetwork/channel/config/NetworkConfigCenter.java, line(s) 179,204,272,317,371,65,74,134,144,145,185,186,336,337
anetwork/channel/cookie/CookieManager.java, line(s) 44,87,160,176
anetwork/channel/cookie/a.java, line(s) 19
anetwork/channel/cookie/b.java, line(s) 42
anetwork/channel/cookie/c.java, line(s) 60
anetwork/channel/download/DownloadManager.java, line(s) 88,94,119,251,389,558,84,85,131,132
anetwork/channel/entity/RequestImpl.java, line(s) 72,95
anetwork/channel/entity/c.java, line(s) 37,38,56,57
anetwork/channel/entity/f.java, line(s) 65,80
anetwork/channel/entity/g.java, line(s) 60,148
anetwork/channel/http/NetworkSdkSetting.java, line(s) 33,46,62,77,79
anetwork/channel/interceptor/InterceptorManager.java, line(s) 17,23
anetwork/channel/monitor/Monitor.java, line(s) 34,42,56
anetwork/channel/unified/UnifiedNetworkDelegate.java, line(s) 44,61
anetwork/channel/unified/a.java, line(s) 48,59,73,74
anetwork/channel/unified/c.java, line(s) 78,80
anetwork/channel/unified/e.java, line(s) 130,90,91,103,104,116,117,183,209,215
anetwork/channel/unified/h.java, line(s) 40,31
anetwork/channel/unified/i.java, line(s) 65,168,203,219,46,47,48,82,117,120,145,161,162,107,149
anetwork/channel/unified/k.java, line(s) 91,109,58
anetwork/channel/unified/n.java, line(s) 24
com/abedelazizshe/lightcompressorlibrary/compressor/Compressor.java, line(s) 332
com/abedelazizshe/lightcompressorlibrary/utils/CompressorUtils.java, line(s) 187,107,238,50
com/abedelazizshe/lightcompressorlibrary/utils/StreamableVideo.java, line(s) 147,182,186,189,91,117,164,199
com/alipay/android/phone/mrpc/core/b.java, line(s) 78
com/aliyun/ams/emas/push/AgooInnerService.java, line(s) 74,77,82,65,66,88,93,98
com/aliyun/ams/emas/push/AgooMessageIntentService.java, line(s) 30,27,38
com/aliyun/ams/emas/push/AgooMessageReceiver.java, line(s) 22,35,38
com/aliyun/ams/emas/push/MsgService.java, line(s) 14,21
com/aliyun/ams/emas/push/NotificationActivity.java, line(s) 18,31
com/aliyun/ams/emas/push/b.java, line(s) 45,117,132,26,34,41,60,88,91,102,105,120,135,98
com/aliyun/ams/emas/push/e.java, line(s) 22
com/aliyun/ams/emas/push/f.java, line(s) 28,59,61,72,79,81,92
com/aliyun/ams/emas/push/notification/a.java, line(s) 25
com/aliyun/ams/emas/push/notification/c.java, line(s) 132
com/aliyun/ams/emas/push/notification/e.java, line(s) 133,144,153,155,75,111,210,102,119,223,140,148
com/aliyun/ams/emas/push/notification/f.java, line(s) 178,207,40,57,109,151,154
com/baseflow/geolocator/GeolocatorLocationService.java, line(s) 49,55,61,67,72,82,87,113,123,126,138
com/baseflow/geolocator/GeolocatorPlugin.java, line(s) 28,36,84,113,167,177
com/baseflow/geolocator/LocationServiceHandlerImpl.java, line(s) 17
com/baseflow/geolocator/MethodCallHandlerImpl.java, line(s) 152,140
com/baseflow/geolocator/StreamHandlerImpl.java, line(s) 58,72,82,87,114,120,47
com/baseflow/geolocator/location/FusedLocationClient.java, line(s) 55,196
com/baseflow/geolocator/permission/PermissionManager.java, line(s) 79,89,109
com/baseflow/permissionhandler/AppSettingsManager.java, line(s) 16
com/baseflow/permissionhandler/PermissionManager.java, line(s) 138,205,208,265,271,274,288
com/baseflow/permissionhandler/PermissionUtils.java, line(s) 503,507,512
com/baseflow/permissionhandler/ServiceManager.java, line(s) 24
com/bumptech/glide/Glide.java, line(s) 158,167,78,77,157,164,186,187
com/bumptech/glide/gifdecoder/GifHeaderParser.java, line(s) 236,275,235,274
com/bumptech/glide/gifdecoder/StandardGifDecoder.java, line(s) 151,169,188,150,168,187,209,218
com/bumptech/glide/load/data/AssetPathFetcher.java, line(s) 36,35
com/bumptech/glide/load/data/HttpUrlFetcher.java, line(s) 55,132,170,54,58,63,70,131,169,67,71
com/bumptech/glide/load/data/LocalUriFetcher.java, line(s) 38,37
com/bumptech/glide/load/data/mediastore/ThumbFetcher.java, line(s) 52,51
com/bumptech/glide/load/data/mediastore/ThumbnailStreamOpener.java, line(s) 61,111,60,110
com/bumptech/glide/load/engine/DecodeJob.java, line(s) 345,393,454
com/bumptech/glide/load/engine/DecodePath.java, line(s) 57,58
com/bumptech/glide/load/engine/Engine.java, line(s) 27,111
com/bumptech/glide/load/engine/GlideException.java, line(s) 81
com/bumptech/glide/load/engine/SourceGenerator.java, line(s) 42,113,41,103,112,104
com/bumptech/glide/load/engine/bitmap_recycle/LruArrayPool.java, line(s) 89,143,90,144
com/bumptech/glide/load/engine/bitmap_recycle/LruBitmapPool.java, line(s) 143,173,181,205,88,95,142,152,172,180,194,204,213,89,96,153,219,195
com/bumptech/glide/load/engine/cache/DiskLruCacheWrapper.java, line(s) 52,62,76,82,112,123,53,77,63,83,113,124
com/bumptech/glide/load/engine/cache/MemorySizeCalculator.java, line(s) 64,48
com/bumptech/glide/load/engine/executor/GlideExecutor.java, line(s) 188,185
com/bumptech/glide/load/engine/executor/RuntimeCompat.java, line(s) 37,36
com/bumptech/glide/load/engine/prefill/BitmapPreFillRunner.java, line(s) 69,68
com/bumptech/glide/load/model/ByteBufferEncoder.java, line(s) 20,19
com/bumptech/glide/load/model/ByteBufferFileLoader.java, line(s) 59,58
com/bumptech/glide/load/model/FileLoader.java, line(s) 64,63
com/bumptech/glide/load/model/ResourceLoader.java, line(s) 39,40
com/bumptech/glide/load/model/ResourceUriLoader.java, line(s) 39,51,64,71,40,52,65,72
com/bumptech/glide/load/model/StreamEncoder.java, line(s) 39,38
com/bumptech/glide/load/resource/DefaultOnHeaderDecodedListener.java, line(s) 62,63
com/bumptech/glide/load/resource/bitmap/BitmapEncoder.java, line(s) 62,61,78,79
com/bumptech/glide/load/resource/bitmap/BitmapImageDecoderResourceDecoder.java, line(s) 25,26
com/bumptech/glide/load/resource/bitmap/DefaultImageHeaderParser.java, line(s) 154,161,178,185,218,228,240,254,268,274,278,283,289,293,153,160,177,184,217,227,239,253,267,273,277,282,288,292
com/bumptech/glide/load/resource/bitmap/Downsampler.java, line(s) 230,351,384,180,206,229,313,350,383,181,314,410
com/bumptech/glide/load/resource/bitmap/DrawableToBitmapConverter.java, line(s) 44,49,45,50
com/bumptech/glide/load/resource/bitmap/HardwareConfigState.java, line(s) 76,81,86,91,96,103,108,115,178,77,82,87,92,97,104,109,116,179
com/bumptech/glide/load/resource/bitmap/TransformationUtils.java, line(s) 168,112,121,128,145,150,167,113,122,129,130,131,135,146,151
com/bumptech/glide/load/resource/bitmap/VideoDecoder.java, line(s) 151,156,203,241,150,155,202,240
com/bumptech/glide/load/resource/gif/ByteBufferGifDecoder.java, line(s) 80,85,90,99,81,86,91,100
com/bumptech/glide/load/resource/gif/GifDrawableEncoder.java, line(s) 25,26
com/bumptech/glide/load/resource/gif/StreamGifDecoder.java, line(s) 55,56
com/bumptech/glide/manager/DefaultConnectivityMonitorFactory.java, line(s) 15,14
com/bumptech/glide/manager/RequestManagerFragment.java, line(s) 124,125
com/bumptech/glide/manager/RequestManagerRetriever.java, line(s) 356,388,376,339,355,372,375,387,425,341,343,373,426
com/bumptech/glide/manager/RequestTracker.java, line(s) 24,25
com/bumptech/glide/manager/SingletonConnectivityReceiver.java, line(s) 229,153,197,228,252,154,198,253
com/bumptech/glide/manager/SupportRequestManagerFragment.java, line(s) 131,140,132,141
com/bumptech/glide/module/ManifestParser.java, line(s) 26,39,44,49,25,32,38,43,48,33
com/bumptech/glide/request/SingleRequest.java, line(s) 425,56,548,473
com/bumptech/glide/request/target/CustomViewTarget.java, line(s) 280,281,295,296
com/bumptech/glide/request/target/ViewTarget.java, line(s) 277,278,292,293
com/bumptech/glide/signature/ApplicationVersionSignature.java, line(s) 46
com/bumptech/glide/util/ContentLengthInputStream.java, line(s) 28,27
com/bumptech/glide/util/pool/FactoryPools.java, line(s) 89,90
com/coremedia/iso/boxes/sampleentry/AudioSampleEntry.java, line(s) 194
com/dooboolab/TauEngine/FlautoPlayer.java, line(s) 193
com/dooboolab/TauEngine/FlautoPlayerEngine.java, line(s) 53,163
com/dooboolab/TauEngine/FlautoPlayerEngineFromMic.java, line(s) 53,79
com/dooboolab/TauEngine/FlautoPlayerMedia.java, line(s) 74
com/dooboolab/TauEngine/FlautoRecorderEngine.java, line(s) 32,42,105
com/example/flutternativeimage/MethodCallHandlerImpl.java, line(s) 187
com/example/imagegallerysaver/ImageGallerySaverPlugin.java, line(s) 162,179
com/example/video_compress/VideoCompressPlugin.java, line(s) 68
com/fluttercandies/photo_manager/core/PhotoManager.java, line(s) 131
com/fluttercandies/photo_manager/core/utils/AndroidQDBUtils.java, line(s) 665,671,709,713,716,727
com/fluttercandies/photo_manager/core/utils/DBUtils.java, line(s) 593,596,607
com/fluttercandies/photo_manager/util/LogUtils.java, line(s) 38,49,60,31
com/friends/fast/MainActivity.java, line(s) 67
com/friends/fast/MainApplication.java, line(s) 46,59,65,94,99,110
com/friends/fast/cloudpushdemo/component/MyMessageIntentService.java, line(s) 14,20,30,36,42,48
com/friends/fast/cloudpushdemo/component/MyMessageReceiver.java, line(s) 16,19,21,27,38,48,54,60
com/friends/fast/cloudpushdemo/component/ThirdPushPopupActivity.java, line(s) 62
com/github/gzuliyujiang/oaid/OAIDLog.java, line(s) 20
com/heytap/mcssdk/utils/LogUtil.java, line(s) 36,66,17,25,54,84,42,72,30,60,48,78
com/huawei/hmf/tasks/a/g.java, line(s) 30,40,66
com/jarvan/fluwx/handlers/FluwxRequestHandler.java, line(s) 85,106
com/jarvan/fluwx/handlers/WXAPiHandler.java, line(s) 145,152,159,166,173
com/jarvan/fluwx/io/ByteArrayToFileKt$saveToLocal$2.java, line(s) 80
com/jarvan/fluwx/io/WeChatNetworkFile$readByteArray$2.java, line(s) 59
com/jarvan/fluwx/utils/WXApiUtils.java, line(s) 46
com/jarvan/fluwx/wxapi/FluwxWXEntryActivity.java, line(s) 33
com/jhomlala/better_player/BetterPlayer$setupPlayerNotification$mediaDescriptionAdapter$1.java, line(s) 134
com/jhomlala/better_player/BetterPlayer.java, line(s) 169,214,1128,1218,1237
com/jhomlala/better_player/BetterPlayerCache.java, line(s) 45
com/jhomlala/better_player/BetterPlayerPlugin.java, line(s) 508,165
com/jhomlala/better_player/CacheWorker.java, line(s) 108,85,90,121
com/jhomlala/better_player/ImageWorker.java, line(s) 93,103,141
com/liteav/audio2/LiteavAudioRecord2.java, line(s) 72,81,108,56
com/liteav/audio2/LiteavAudioTrack2.java, line(s) 53,62,100,33,36
com/liteav/audio2/earmonitor/a.java, line(s) 129,133,139
com/liteav/audio2/earmonitor/b/a/b.java, line(s) 46,68
com/liteav/audio2/earmonitor/b/a/c.java, line(s) 30,47,99,115,127
com/liteav/audio2/earmonitor/b/a/d.java, line(s) 44,103,123,134
com/liteav/audio2/earmonitor/h.java, line(s) 34,88,97,24
com/liteav/audio2/route/AudioDeviceProperty.java, line(s) 171,81,83,91,100,108,110,118,126,128,135,137,145,153,155,162,164
com/liteav/audio2/route/a.java, line(s) 45,105,157,52,114,123,127,137,148
com/liteav/audio2/route/b.java, line(s) 30,44,47,50,53,68,77,90,26,115,124,132,141
com/llfbandit/record/AudioRecorder.java, line(s) 30
com/llfbandit/record/MediaRecorder.java, line(s) 39,145,159
com/otaliastudios/opengl/core/EglConfigChooser.java, line(s) 59
com/otaliastudios/opengl/core/EglContextFactory.java, line(s) 59
com/otaliastudios/opengl/core/EglCore.java, line(s) 144,155,109
com/otaliastudios/opengl/core/Egloo.java, line(s) 37,49,60,70
com/otaliastudios/transcoder/internal/Logger.java, line(s) 72,67,65,69
com/ryanheise/just_audio/AudioPlayer.java, line(s) 503,505,507,509,513
com/ta/a/c/f.java, line(s) 17,23,29,35,41
com/ta/utdid2/device/d.java, line(s) 109,129
com/taobao/agoo/BaseNotifyClick.java, line(s) 76,81,86,94,177,33,39,158,174,69,123
com/taobao/agoo/BaseNotifyClickActivity.java, line(s) 38,50
com/taobao/agoo/TaobaoRegister.java, line(s) 115,241,266,530,548,73,95,224,312,347,392,405,419,458,472,485,498
com/taobao/agoo/a/a.java, line(s) 51,71,74,59
com/taobao/agoo/a/a/a.java, line(s) 27,24
com/taobao/agoo/a/a/c.java, line(s) 37,86,34,73
com/taobao/agoo/a/a/d.java, line(s) 26,23
com/taobao/agoo/a/b.java, line(s) 126,60
com/taobao/agoo/b.java, line(s) 14,46
com/taobao/agoo/c.java, line(s) 87,44,55
com/tekartik/sqflite/Database.java, line(s) 98,114,208,293,357,385,467,477,545,131,494,570
com/tekartik/sqflite/SqflitePlugin.java, line(s) 281,287,298,318,323,361,377,403,418,434,459,468,438,463
com/tekartik/sqflite/Utils.java, line(s) 29
com/tekartik/sqflite/dev/Debug.java, line(s) 11
com/tencent/custom/customcapture/extractor/Extractor.java, line(s) 51
com/tencent/custom/customcapture/extractor/RangeExtractorAdvancer.java, line(s) 25,32
com/tencent/custom/customcapture/opengl/OpenGlUtils.java, line(s) 30,61,69,83
com/tencent/custom/customcapture/opengl/Program.java, line(s) 21,26,35
com/tencent/custom/customcapture/render/EGL10Helper.java, line(s) 130
com/tencent/custom/customcapture/render/EGL14Helper.java, line(s) 40,138
com/tencent/custom/customcapture/structs/FrameBuffer.java, line(s) 22,39
com/tencent/live2/impl/V2TXLivePusherImpl.java, line(s) 417,32,42
com/tencent/live2/impl/V2TXLiveUtils.java, line(s) 157,15,18
com/tencent/live2/impl/a.java, line(s) 54
com/tencent/rtmp/TXLiveBase.java, line(s) 101,115,179,185,68
com/tencent/rtmp/TXLivePusher.java, line(s) 59,69
com/tencent/rtmp/TXVodPlayer.java, line(s) 356,460,464,57,86,91,96,111,119,143,150,167,195,210,213,218,227,237,241,295,319,326,336,346,350,362,372,383,389,399,434,439,446,451,456,474,481,488,495,502,511,535,572,577,582,587,596,607,624,633,660,665,670,675,684,692,301,605
com/tencent/rtmp/a/a.java, line(s) 50,231,242,301,127
com/tencent/rtmp/downloader/TXVodDownloadManager.java, line(s) 58,143,115,198,97,100,123,138,152,183
com/tencent/rtmp/downloader/TXVodPreloadManager.java, line(s) 232,242,252
com/tencent/rtmp/downloader/a/b.java, line(s) 259,285,342,390,34,46,61,151,279,375,384,657,76,185
com/tencent/rtmp/downloader/a/d.java, line(s) 52,174,182,187,192,197
com/tencent/rtmp/ui/TXCloudVideoView.java, line(s) 152,172,197,285,288,145,155,175,209,221
com/tencent/rtmp/ui/TXSubtitleView.java, line(s) 45
com/tencent/rtmp/video/ScreenCaptureService.java, line(s) 24,20,31
com/tencent/rtmp/video/TXScreenCapture.java, line(s) 27,40,20,36,50
com/tencent/tauth/AuthActivity.java, line(s) 38,45,114,206,54,66,78,92,156,167,40,30,73,197
com/tencent/tauth/Tencent.java, line(s) 196,207,212,217,220,77,124,173,177,187,193,108,113,122,137,148,153,161,231,237,243,249,255,261,268,275,281,289,295,301,307,313,319,328,334,340,347,355,361,367,382,389,396,403,410,417,429,440,446,452,455,460,466,472,481,487,496,503,510,517,525,537,552,554,559,565,571,582,588,618,624,630,638
com/tencent/tmediacodec/a/a.java, line(s) 10
com/tencent/trtc/TRTCCloud.java, line(s) 291
com/tencent/trtcplugin/TRTCCloudPlugin.java, line(s) 98,100,102,441,444,563,571,694,707,783,796,94
com/tencent/trtcplugin/util/CommonUtil.java, line(s) 17
com/tencent/trtcplugin/view/CustomRenderVideoFrame.java, line(s) 113,61,125
com/tencent/trtcplugin/view/TRTCCloudVideoPlatformView.java, line(s) 74
com/tencent/trtcplugin/view/TRTCCloudVideoSurfaceView.java, line(s) 71
com/tencent/ugc/MP4Writer.java, line(s) 44,53,62,67,72,77,84,93,123,79,104,106,114,116
com/tencent/ugc/MediaExtractorWrapper.java, line(s) 115,127,139,188,23,48,152,211,217,147,169
com/tencent/ugc/RemuxJoiner.java, line(s) 75,33,41,35,52,61,70,83
com/tencent/ugc/TXUGCRecord.java, line(s) 129,137,145,153,161,169,177,185,193,201,209,217,225,233,241,250,259,268,277,286,295,304,313,322
com/tencent/ugc/TXVideoEditer.java, line(s) 293,315,333,357,370,383,399,416,424,465,478,491,504,517,530,544,559,573,587,601,616,638,652,676,691,704,718,731,744,1323,1508,1528,1534,1539,161,180,202,208,278,284,300,309,322,343,364,377,392,407,419,429,472,485,498,511,524,538,552,567,581,595,608,628,646,660,685,698,712,725,738,751,760,773,787,801,806,828,842,889,907,944,950,953,981,1021,1035,1049,1054,1078,1090,1100,1110,1120,1130,1178,1200,1243,1252,1257,1265,1270,1329,1363,1371,1382,1406,1466,1496,1623,454,1435,1477,1553,1570
com/tencent/ugc/TXVideoInfoReader.java, line(s) 68,74,126,178,63,82,88,181,198,203,217,238,255,273,159,162,173,190,192,251
com/tencent/ugc/TXVideoJoiner.java, line(s) 217,295,111,120,124,137,142,166,178,190,195,205,210,215,227,234,262,277,293,328,338,365
com/tencent/ugc/UGCAudioProcessor.java, line(s) 282,273
com/tencent/ugc/UGCCombineFrameFilter.java, line(s) 55
com/tencent/ugc/UGCCombineProcessor.java, line(s) 42,20
com/tencent/ugc/UGCImageProvider.java, line(s) 185,199,235,55,66,86,104,115,143,69,162
com/tencent/ugc/UGCInitializer.java, line(s) 20,29
com/tencent/ugc/UGCLicenseChecker.java, line(s) 27,24
com/tencent/ugc/UGCMediaListSource.java, line(s) 97,110,153,175,187,365,381,401,413,437,458,538,556,570,600,618,641,736,848,100,911,941,974
com/tencent/ugc/UGCMultiFileAudioFrameProvider.java, line(s) 33
com/tencent/ugc/UGCMultiFilePixelFrameProvider.java, line(s) 48
com/tencent/ugc/UGCRecorderJni.java, line(s) 680,471
com/tencent/ugc/UGCSingleFileAudioFrameProvider.java, line(s) 63,90,51,139,263,272,277,143
com/tencent/ugc/UGCSingleFilePixelFrameProvider.java, line(s) 206,414,75,89,95,131,136,153,174,211,284,314,396,406,442,462,481,543,393
com/tencent/ugc/UGCThumbnailGenerator.java, line(s) 65,200,51,73,99,120,144,164,176,191,223,247,102,124,160,244
com/tencent/ugc/UGCTransitionProcessor.java, line(s) 40,28
com/tencent/ugc/UGCVideoProcessor.java, line(s) 270,282,456,838,868,874,126,156,199,246,300,320,389,410,419,429,482,568,598,662,775,801,822,843
com/tencent/ugc/VideoDemuxerFFmpeg.java, line(s) 56,59,67,40,105
com/tencent/ugc/common/MediaExtractorBuilder.java, line(s) 43
com/tencent/ugc/common/MediaRetrieverBuilder.java, line(s) 33
com/tencent/ugc/common/UGCTranscodeAudioEncodeParamsDecider.java, line(s) 23,110
com/tencent/ugc/common/UGCTranscodeVideoEncodeParamsDecider.java, line(s) 51,58,63,77,85,93,111,144,224,242,255,274,278
com/tencent/ugc/decoder/UGCVideoDecodeController.java, line(s) 254,259,264,64,115,143,171,190,209,217,227,238,303,118
com/tencent/ugc/encoder/UGCVideoEncodeController.java, line(s) 62,90,275,282,290,70,83,113,119,129,167
com/tencent/ugc/retriver/FFmpegMediaRetriever.java, line(s) 25,31,36
com/tencent/ugc/videoprocessor/VideoEffectProcessor.java, line(s) 38,59,67,72
com/tencent/ugc/videoprocessor/VideoTransitionProcessor.java, line(s) 124,109,111,128
com/tencent/ugc/videoprocessor/WatermarkProcessor.java, line(s) 248,288,52,196,217,246,298
com/tencent/ugc/videoprocessor/videoeffect/filter/TXCGPULightingFilter.java, line(s) 51,59
com/tencent/ugc/videoprocessor/watermark/AnimatedPasterFilterChain.java, line(s) 120,124,146
com/tencent/ugc/videoprocessor/watermark/TailWaterMarkChain.java, line(s) 11,32
com/xuexiang/flutter_xupdate/OKHttpUpdateHttpService.java, line(s) 29
com/xuexiang/xupdate/UpdateManager.java, line(s) 82,124,281,295,156,170,204,241,252,267
com/xuexiang/xupdate/XUpdate.java, line(s) 92,113,117,143,149,155,161,172,177
com/xuexiang/xupdate/_XUpdate.java, line(s) 156
com/xuexiang/xupdate/listener/impl/DefaultUpdateFailureListener.java, line(s) 9
com/xuexiang/xupdate/logs/LogcatLogger.java, line(s) 58,67,61,55,73,64,70
com/xuexiang/xupdate/proxy/impl/DefaultFileEncryptor.java, line(s) 22
com/xuexiang/xupdate/proxy/impl/DefaultUpdateParser.java, line(s) 99
com/xuexiang/xupdate/proxy/impl/DefaultUpdatePrompter.java, line(s) 24,20
com/xuexiang/xupdate/service/DownloadService.java, line(s) 167,285,136,171
com/xuexiang/xupdate/utils/UpdateUtils.java, line(s) 258,268,275
com/yalantis/ucrop/UCropActivity.java, line(s) 154
com/yalantis/ucrop/task/BitmapCropTask.java, line(s) 149,157,184,129
com/yalantis/ucrop/task/BitmapLoadTask.java, line(s) 124,142,83,86,129,134
com/yalantis/ucrop/util/BitmapLoadUtils.java, line(s) 103,51,82
com/yalantis/ucrop/util/EglUtils.java, line(s) 26
com/yalantis/ucrop/util/FileUtils.java, line(s) 62,98
com/yalantis/ucrop/util/ImageHeaderParser.java, line(s) 57,64,75,82,115,125,137,151,165,171,175,180,186,190,281,287,300,307,314,324,342,350,355,368,375,391,408,421,428,435,56,63,74,81,114,124,136,150,164,170,174,179,185,189
com/yalantis/ucrop/view/TransformImageView.java, line(s) 227,248,136,80
com/zhy/http/okhttp/cookie/store/PersistentCookieStore.java, line(s) 141,150,153
com/zhy/http/okhttp/log/LoggerInterceptor.java, line(s) 40,43,45,47,50,54,58,61,63,74,76,78,81,86,89,91,94
com/zhy/http/okhttp/utils/L.java, line(s) 9
io/flutter/Log.java, line(s) 45,49,37,41,53,57
io/flutter/app/FlutterActivityDelegate.java, line(s) 317
io/flutter/embedding/android/FlutterActivity.java, line(s) 211,235,208,322,543,548
io/flutter/embedding/android/FlutterActivityAndFragmentDelegate.java, line(s) 148,167,185,191,204,223,242,265,316,324,341,349,359,370,391,395,423,433,443,458,468,209,329,427,437,452,462,472
io/flutter/embedding/android/FlutterFragment.java, line(s) 445,559,426,654,659
io/flutter/embedding/android/FlutterFragmentActivity.java, line(s) 139,163,136,206,222
io/flutter/embedding/android/FlutterImageView.java, line(s) 67
io/flutter/embedding/android/FlutterSplashView.java, line(s) 108,114,121,163
io/flutter/embedding/android/FlutterSurfaceView.java, line(s) 42,51,59,73,111,113,121,131,165,140,151
io/flutter/embedding/android/FlutterTextureView.java, line(s) 36,45,53,80,82,88,97,141,104,115
io/flutter/embedding/android/FlutterView.java, line(s) 806,130,216,280,335,390,423,425,428,431,457,466,510,532,622,638,782,785,788,831,833,905,910,1007
io/flutter/embedding/android/KeyboardManager.java, line(s) 122,134
io/flutter/embedding/engine/FlutterEngine.java, line(s) 102,164,183
io/flutter/embedding/engine/FlutterEngineConnectionRegistry.java, line(s) 248,265,284,298,313,327,341,355,392,451,486,61,74,71
io/flutter/embedding/engine/FlutterJNI.java, line(s) 298,639,148,156,164,479,488,497,513
io/flutter/embedding/engine/dart/DartExecutor.java, line(s) 60,65,84,99,79,94
io/flutter/embedding/engine/dart/DartMessenger.java, line(s) 255,329,176,186,221,229,248,260,297,316,320
io/flutter/embedding/engine/deferredcomponents/PlayStoreDeferredComponentManager.java, line(s) 56,60,64,68,72,99,108,112,116,87,147,175,192,236,316
io/flutter/embedding/engine/loader/FlutterLoader.java, line(s) 218,262
io/flutter/embedding/engine/loader/ResourceExtractor.java, line(s) 69,95
io/flutter/embedding/engine/plugins/shim/ShimPluginRegistry.java, line(s) 28
io/flutter/embedding/engine/plugins/shim/ShimRegistrar.java, line(s) 154,160,170,177,183,190
io/flutter/embedding/engine/plugins/util/GeneratedPluginRegister.java, line(s) 12,13
io/flutter/embedding/engine/renderer/FlutterRenderer.java, line(s) 87,95,182,223,257
io/flutter/embedding/engine/systemchannels/AccessibilityChannel.java, line(s) 38
io/flutter/embedding/engine/systemchannels/DeferredComponentChannel.java, line(s) 30
io/flutter/embedding/engine/systemchannels/KeyEventChannel.java, line(s) 65
io/flutter/embedding/engine/systemchannels/LifecycleChannel.java, line(s) 16,21,26,31
io/flutter/embedding/engine/systemchannels/LocalizationChannel.java, line(s) 57,60
io/flutter/embedding/engine/systemchannels/MouseCursorChannel.java, line(s) 27
io/flutter/embedding/engine/systemchannels/NavigationChannel.java, line(s) 27,32,37
io/flutter/embedding/engine/systemchannels/PlatformChannel.java, line(s) 63,275
io/flutter/embedding/engine/systemchannels/PlatformViewsChannel.java, line(s) 69
io/flutter/embedding/engine/systemchannels/RestorationChannel.java, line(s) 81
io/flutter/embedding/engine/systemchannels/SettingsChannel.java, line(s) 61
io/flutter/embedding/engine/systemchannels/SpellCheckChannel.java, line(s) 24,29
io/flutter/embedding/engine/systemchannels/SystemChannel.java, line(s) 17
io/flutter/embedding/engine/systemchannels/TextInputChannel.java, line(s) 60,248,253,258,268,273,278,283,288,293,298,303,308
io/flutter/plugin/common/BasicMessageChannel.java, line(s) 71,93
io/flutter/plugin/common/EventChannel.java, line(s) 79,87,101
io/flutter/plugin/common/MethodChannel.java, line(s) 80,112
io/flutter/plugin/editing/InputConnectionAdaptor.java, line(s) 182,201,233
io/flutter/plugin/editing/ListenableEditingState.java, line(s) 56,71,113,125,138,80,116
io/flutter/plugin/editing/TextEditingDelta.java, line(s) 84
io/flutter/plugin/editing/TextInputPlugin.java, line(s) 338,441
io/flutter/plugin/platform/PlatformPlugin.java, line(s) 357
io/flutter/plugin/platform/PlatformViewWrapper.java, line(s) 104,193,195,199
io/flutter/plugin/platform/PlatformViewsController.java, line(s) 115,150,168,191,226,231,249,257,269,277,766,320,325,355
io/flutter/plugin/platform/SingleViewPresentation.java, line(s) 89,289,298,306,317
io/flutter/plugins/GeneratedPluginRegistrant.java, line(s) 51,56,61,66,71,76,81,86,91,96,101,106,111,116,121,126,131,136,141,146,151,156,161,166,171,176,181,186,191,196,201,206,211,216,221,226,231,236,241,246
io/flutter/plugins/imagepicker/ExifDataCopier.java, line(s) 16
io/flutter/plugins/imagepicker/FileUtils.java, line(s) 24
io/flutter/plugins/imagepicker/ImageResizer.java, line(s) 144
io/flutter/plugins/pathprovider/PathProviderPlugin.java, line(s) 22
io/flutter/plugins/sharedpreferences/SharedPreferencesPlugin.java, line(s) 50
io/flutter/plugins/urllauncher/UrlLauncherPlugin.java, line(s) 28,39,49
io/flutter/plugins/videoplayer/VideoPlayerPlugin.java, line(s) 80,109
io/flutter/plugins/webviewflutter/DisplayListenerProxy.java, line(s) 80
io/flutter/plugins/webviewflutter/InputAwareWebView.java, line(s) 61,82,90,98,27
io/flutter/view/AccessibilityBridge.java, line(s) 890
io/flutter/view/AccessibilityViewEmbedder.java, line(s) 293,299,306,313,326,355,358,372,374,381,384,387,400,402,410,441,444
io/flutter/view/FlutterNativeView.java, line(s) 142,59
io/flutter/view/FlutterView.java, line(s) 659,264
org/android/agoo/accs/AgooService.java, line(s) 29,40,143,49,56,72,114,121,139,152,157,35,36,55,71,88,89,96,97,101,104,112,113,120,129,130,142,146,147,151,156
org/android/agoo/common/Config.java, line(s) 38,52,159,28,31,47,50,76,85,66,87
org/android/agoo/control/AgooFactory.java, line(s) 141,284,92,149,178,307,395,413,416,434,459,513,523,87,88,102,103,106,177,184,226,227,231,394,402,449,450,515,516,196,199,200,201,202
org/android/agoo/control/BaseIntentService.java, line(s) 105,65,72,79,80,104
org/android/agoo/control/NotifManager.java, line(s) 158,218,75,94,111,150,191,72,74,105,106,157,208
org/android/agoo/control/a.java, line(s) 69,41,52
org/android/agoo/control/c.java, line(s) 24
org/android/agoo/control/d.java, line(s) 71,34,43,54
org/android/agoo/control/f.java, line(s) 27,43,23,24
org/android/agoo/control/g.java, line(s) 27,43,23,24
org/android/agoo/control/h.java, line(s) 18,21
org/android/agoo/control/m.java, line(s) 71,93,85,86,92
org/android/agoo/message/MessageService.java, line(s) 254,686,91,103,109,117,127,141,215,283,298,307,316,327,346,401,452,459,473,490,525,697,708,133,134,140,175,176,214,270,271,282,297,306,315,326,400,420,432,451,458,472,489,505,524,589,590,648,649,654,655,707
org/android/spdy/NetTimeGaurd.java, line(s) 31,41
org/android/spdy/ProtectedPointerTest.java, line(s) 13,20,38
org/android/spdy/spduLog.java, line(s) 11,53,25,18,32,39,46
org/repackage/com/meizu/flyme/openidsdk/OpenIdHelper.java, line(s) 30
org/repackage/com/meizu/flyme/openidsdk/b.java, line(s) 80
org/repackage/com/miui/deviceid/IdentifierManager.java, line(s) 25,61
org/repackage/com/vivo/identifier/DataBaseOperation.java, line(s) 44
org/repackage/com/vivo/identifier/IdentifierIdClient.java, line(s) 150,78,160,169
org/repackage/com/vivo/identifier/IdentifierIdObserver.java, line(s) 24
org/repackage/com/zui/opendeviceidlibrary/OpenDeviceId.java, line(s) 180,174
xyz/justsoft/video_thumbnail/VideoThumbnailPlugin.java, line(s) 132,201

信息 此应用程序将数据复制到剪贴板。敏感数据不应复制到剪贴板，因为其他应用程序可以访问它 

此应用程序将数据复制到剪贴板。敏感数据不应复制到剪贴板，因为其他应用程序可以访问它
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04b-Mobile-App-Security-Testing.md#clipboard

Files:
io/flutter/plugin/editing/InputConnectionAdaptor.java, line(s) 4,360,369
io/flutter/plugin/platform/PlatformPlugin.java, line(s) 7,365

安全 此应用程序使用SSL Pinning 来检测或防止安全通信通道中的MITM攻击 

此应用程序使用SSL Pinning 来检测或防止安全通信通道中的MITM攻击
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05g-Testing-Network-Communication.md#testing-custom-certificate-stores-and-certificate-pinning-mstg-network-4

Files:
com/ta/a/b/c.java, line(s) 53,56,52,50
com/ta/a/b/f.java, line(s) 66,68,97
com/ta/a/b/g.java, line(s) 48,51,47,45
com/zhy/http/okhttp/https/HttpsUtils.java, line(s) 106,170,41,104,104,168,168

安全 此应用程序可能具有Root检测功能 

此应用程序可能具有Root检测功能
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05j-Testing-Resiliency-Against-Reverse-Engineering.md#testing-root-detection-mstg-resilience-1

Files:
com/xuexiang/xupdate/utils/ApkInstallUtils.java, line(s) 90,134

关注 应用程序可能与位于OFAC制裁国家 (China) 的服务器 (mpush-api.aliyun.com) 通信。 

{'ip': '106.11.248.144', 'country_short': 'CN', 'country_long': 'China', 'region': 'Zhejiang', 'city': 'Hangzhou', 'latitude': '30.293650', 'longitude': '120.161423'}

关注 应用程序可能与位于OFAC制裁国家 (China) 的服务器 (mobilegw.dl.alipaydev.com) 通信。 

{'ip': '110.75.132.25', 'country_short': 'CN', 'country_long': 'China', 'region': 'Zhejiang', 'city': 'Hangzhou', 'latitude': '30.293650', 'longitude': '120.161423'}

关注 应用程序可能与位于OFAC制裁国家 (China) 的服务器 (login.sina.com.cn) 通信。 

{'ip': '183.60.95.224', 'country_short': 'CN', 'country_long': 'China', 'region': 'Guangdong', 'city': 'Guangzhou', 'latitude': '23.127361', 'longitude': '113.264252'}

关注 应用程序可能与位于OFAC制裁国家 (China) 的服务器 (adash.m.taobao.com) 通信。 

{'ip': '59.82.39.12', 'country_short': 'CN', 'country_long': 'China', 'region': 'Zhejiang', 'city': 'Hangzhou', 'latitude': '30.293650', 'longitude': '120.161423'}

关注 应用程序可能与位于OFAC制裁国家 (China) 的服务器 (mobilegw.alipaydev.com) 通信。 

{'ip': '110.75.132.131', 'country_short': 'CN', 'country_long': 'China', 'region': 'Zhejiang', 'city': 'Hangzhou', 'latitude': '30.293650', 'longitude': '120.161423'}

关注 应用程序可能与位于OFAC制裁国家 (China) 的服务器 (appgallery.cloud.huawei.com) 通信。 

{'ip': '49.4.35.16', 'country_short': 'CN', 'country_long': 'China', 'region': 'Beijing', 'city': 'Beijing', 'latitude': '39.907501', 'longitude': '116.397232'}

关注 应用程序可能与位于OFAC制裁国家 (China) 的服务器 (h5.m.taobao.com) 通信。 

{'ip': '121.228.130.198', 'country_short': 'CN', 'country_long': 'China', 'region': 'Jiangsu', 'city': 'Suzhou', 'latitude': '31.311390', 'longitude': '120.618057'}

关注 应用程序可能与位于OFAC制裁国家 (China) 的服务器 (c-adash.m.taobao.com) 通信。 

{'ip': '59.82.39.12', 'country_short': 'CN', 'country_long': 'China', 'region': 'Zhejiang', 'city': 'Hangzhou', 'latitude': '30.293650', 'longitude': '120.161423'}

安全评分: ( 相亲派 2.1.8)