移动应用安全检测报告: CV Engineer v18.00.47

安全基线评分


安全基线评分 52/100

综合风险等级


风险等级评定

  1. A
  2. B
  3. C
  4. F

漏洞与安全项分布(%)


隐私风险

3

检测到的第三方跟踪器数量


检测结果分布

高危安全漏洞 1
中危安全漏洞 29
安全提示信息 3
已通过安全项 2
重点安全关注 0

高危安全漏洞 该文件是World Readable。任何应用程序都可以读取文件

该文件是World Readable。任何应用程序都可以读取文件
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#testing-local-storage-for-sensitive-data-mstg-storage-1-and-mstg-storage-2

Files:
Hub/C0000.java, line(s) 52
Hub/C0017.java, line(s) 52
y9/C0537b.java, line(s) 213

中危安全漏洞 应用数据允许备份

[android:allowBackup=true]
该标志允许通过 adb 工具备份应用数据。启用 USB 调试的用户可直接复制应用数据,存在数据泄露风险。

中危安全漏洞 Activity (sampson.cvbuilder.MainActivity) 未受保护。

[android:exported=true]
检测到  Activity 已导出,未受任何权限保护,任意应用均可访问。

中危安全漏洞 Activity (sampson.cvbuilder.ui.selecttemplate.ChooseTemplateActivity) 未受保护。

[android:exported=true]
检测到  Activity 已导出,未受任何权限保护,任意应用均可访问。

中危安全漏洞 Activity (sampson.cvbuilder.ui.selectlanguage.ChooseLanguageActivity) 未受保护。

[android:exported=true]
检测到  Activity 已导出,未受任何权限保护,任意应用均可访问。

中危安全漏洞 Activity (sampson.cvbuilder.ui.plus.SuperPurchaseActivity) 未受保护。

[android:exported=true]
检测到  Activity 已导出,未受任何权限保护,任意应用均可访问。

中危安全漏洞 Activity (sampson.cvbuilder.ui.plus.SuperUserActivity) 未受保护。

[android:exported=true]
检测到  Activity 已导出,未受任何权限保护,任意应用均可访问。

中危安全漏洞 Activity (sampson.cvbuilder.ui.reviewrequest.ReviewRequestActivity) 未受保护。

[android:exported=true]
检测到  Activity 已导出,未受任何权限保护,任意应用均可访问。

中危安全漏洞 Activity (sampson.cvbuilder.ui.newonboard.splash.NewOnboardWelcomeActivity) 未受保护。

[android:exported=true]
检测到  Activity 已导出,未受任何权限保护,任意应用均可访问。

中危安全漏洞 Activity (com.facebook.CustomTabActivity) 未受保护。

[android:exported=true]
检测到  Activity 已导出,未受任何权限保护,任意应用均可访问。

中危安全漏洞 Service (com.google.android.gms.auth.api.signin.RevocationBoundService) 受权限保护,但应检查权限保护级别。

Permission: com.google.android.gms.auth.api.signin.permission.REVOCATION_NOTIFICATION [android:exported=true]
检测到  Service 已导出并受未在本应用定义的权限保护。请在权限定义处核查其保护级别。若为 normal 或 dangerous,恶意应用可申请并与组件交互;若为 signature,仅同证书签名应用可访问。

中危安全漏洞 Activity (com.google.firebase.auth.internal.GenericIdpActivity) 未受保护。

[android:exported=true]
检测到  Activity 已导出,未受任何权限保护,任意应用均可访问。

中危安全漏洞 Activity (com.google.firebase.auth.internal.RecaptchaActivity) 未受保护。

[android:exported=true]
检测到  Activity 已导出,未受任何权限保护,任意应用均可访问。

中危安全漏洞 Activity (androidx.compose.ui.tooling.PreviewActivity) 未受保护。

[android:exported=true]
检测到  Activity 已导出,未受任何权限保护,任意应用均可访问。

中危安全漏洞 Service (androidx.work.impl.background.systemjob.SystemJobService) 受权限保护,但应检查权限保护级别。

Permission: android.permission.BIND_JOB_SERVICE [android:exported=true]
检测到  Service 已导出并受未在本应用定义的权限保护。请在权限定义处核查其保护级别。若为 normal 或 dangerous,恶意应用可申请并与组件交互;若为 signature,仅同证书签名应用可访问。

中危安全漏洞 Broadcast Receiver (androidx.work.impl.diagnostics.DiagnosticsReceiver) 受权限保护,但应检查权限保护级别。

Permission: android.permission.DUMP [android:exported=true]
检测到  Broadcast Receiver 已导出并受未在本应用定义的权限保护。请在权限定义处核查其保护级别。若为 normal 或 dangerous,恶意应用可申请并与组件交互;若为 signature,仅同证书签名应用可访问。

中危安全漏洞 Broadcast Receiver (androidx.profileinstaller.ProfileInstallReceiver) 受权限保护,但应检查权限保护级别。

Permission: android.permission.DUMP [android:exported=true]
检测到  Broadcast Receiver 已导出并受未在本应用定义的权限保护。请在权限定义处核查其保护级别。若为 normal 或 dangerous,恶意应用可申请并与组件交互;若为 signature,仅同证书签名应用可访问。

中危安全漏洞 SHA-1是已知存在哈希冲突的弱哈希

SHA-1是已知存在哈希冲突的弱哈希
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#identifying-insecure-andor-deprecated-cryptographic-algorithms-mstg-crypto-4

Files:
M5/h.java, line(s) 114
com/revenuecat/purchases/common/UtilsKt.java, line(s) 56
s6/c.java, line(s) 65

中危安全漏洞 文件可能包含硬编码的敏感信息,如用户名、密码、密钥等

文件可能包含硬编码的敏感信息,如用户名、密码、密钥等
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#checking-memory-for-sensitive-data-mstg-storage-10

Files:
E6/C1573f.java, line(s) 53
E6/F.java, line(s) 49
H6/C0539a.java, line(s) 60
H6/C1803a.java, line(s) 64
N3/k.java, line(s) 151
N6/C0648w.java, line(s) 42
N6/C2118w.java, line(s) 46
P3/C0586a.java, line(s) 47
P3/C2381a.java, line(s) 47
R7/i.java, line(s) 131
R8/U.java, line(s) 52
T/AbstractC0623b.java, line(s) 17
T/AbstractC2520b.java, line(s) 17
U0/D.java, line(s) 41
V/C0261h0.java, line(s) 25
V/C1069h0.java, line(s) 26
com/revenuecat/purchases/amazon/AmazonBillingKt.java, line(s) 7
com/revenuecat/purchases/amazon/AmazonCacheKt.java, line(s) 7
com/revenuecat/purchases/common/BackendKt.java, line(s) 13,12
com/revenuecat/purchases/common/caching/DeviceCache.java, line(s) 114,38,39,40
com/revenuecat/purchases/common/diagnostics/DiagnosticsEntry.java, line(s) 19,22,25,31
com/revenuecat/purchases/common/diagnostics/DiagnosticsHelper.java, line(s) 14
com/revenuecat/purchases/common/diagnostics/DiagnosticsTracker.java, line(s) 39,42,45,48,51,54,57
com/revenuecat/purchases/common/offlineentitlements/ProductEntitlementMapping.java, line(s) 19,21,22,23
com/revenuecat/purchases/common/verification/DefaultSignatureVerifier.java, line(s) 12
com/revenuecat/purchases/common/verification/Signature.java, line(s) 202
com/revenuecat/purchases/strings/ConfigureStrings.java, line(s) 18
com/revenuecat/purchases/subscriberattributes/SubscriberAttributeKt.java, line(s) 10
com/vungle/ads/internal/h.java, line(s) 6,10,18,7,14,26,9,15
com/vungle/ads/internal/signals/b.java, line(s) 28,30
com/vungle/ads/internal/task/b.java, line(s) 19
l6/h.java, line(s) 68

中危安全漏洞 MD5是已知存在哈希冲突的弱哈希

MD5是已知存在哈希冲突的弱哈希
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#identifying-insecure-andor-deprecated-cryptographic-algorithms-mstg-crypto-4

Files:
G3/c.java, line(s) 136
R0/f.java, line(s) 70

中危安全漏洞 应用程序使用SQLite数据库并执行原始SQL查询。原始SQL查询中不受信任的用户输入可能会导致SQL注入。敏感信息也应加密并写入数据库

应用程序使用SQLite数据库并执行原始SQL查询。原始SQL查询中不受信任的用户输入可能会导致SQL注入。敏感信息也应加密并写入数据库
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x04h-Testing-Code-Quality.md#injection-flaws-mstg-arch-2-and-mstg-platform-2

Files:
A6/m.java, line(s) 9,258
A6/t.java, line(s) 4,5,105
E6/C0073l.java, line(s) 5,40
E6/C0289l.java, line(s) 6,45
M5/C.java, line(s) 21,143
Q2/i.java, line(s) 6,29,44,45
Z2/e.java, line(s) 20,120,121
g2/b.java, line(s) 4,5,6,56
j6/C0554B.java, line(s) 4,5,30,39,57
j6/C0555C.java, line(s) 4,19,65
j6/C1889B.java, line(s) 4,5,32,41,59
j6/C1890C.java, line(s) 5,22,68
j6/w.java, line(s) 4,5,19
j6/y.java, line(s) 4,5,60
o6/C0663g.java, line(s) 25,782
o6/C2215g.java, line(s) 25,811
v4/g.java, line(s) 5,27
v4/l.java, line(s) 5,6,73

中危安全漏洞 IP地址泄露

IP地址泄露


Files:
H4/C1786c.java, line(s) 25
H4/c.java, line(s) 25

中危安全漏洞 应用程序创建临时文件。敏感信息永远不应该被写进临时文件

应用程序创建临时文件。敏感信息永远不应该被写进临时文件


Files:
I3/r.java, line(s) 49
p4/f.java, line(s) 77

中危安全漏洞 应用程序使用不安全的随机数生成器

应用程序使用不安全的随机数生成器
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#weak-random-number-generators

Files:
A6/o.java, line(s) 13
A6/w.java, line(s) 14
H6/e.java, line(s) 9
P/i1.java, line(s) 12
Q7/C0200j1.java, line(s) 10
Q7/C0819j1.java, line(s) 10
Q7/E0.java, line(s) 18
Q7/T.java, line(s) 18
Q7/V.java, line(s) 3
Q7/Z1.java, line(s) 6
R7/m.java, line(s) 51
S3/i.java, line(s) 29
X7/t.java, line(s) 24
z6/j.java, line(s) 21

中危安全漏洞 可能存在跨域漏洞。在 WebView 中启用从 URL 访问文件可能会泄漏文件系统中的敏感信息

可能存在跨域漏洞。在 WebView 中启用从 URL 访问文件可能会泄漏文件系统中的敏感信息
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05h-Testing-Platform-Interaction.md#static-analysis-6

Files:
J7/c.java, line(s) 79,74

中危安全漏洞 应用程序可以读取/写入外部存储器,任何应用程序都可以读取写入外部存储器的数据

应用程序可以读取/写入外部存储器,任何应用程序都可以读取写入外部存储器的数据
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#external-storage

Files:
com/vungle/ads/internal/platform/a.java, line(s) 193

中危安全漏洞 不安全的Web视图实现。可能存在WebView任意代码执行漏洞

不安全的Web视图实现。可能存在WebView任意代码执行漏洞
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05h-Testing-Platform-Interaction.md#testing-javascript-execution-in-webviews-mstg-platform-5

Files:
M/I.java, line(s) 78,75

中危安全漏洞 Firebase远程配置已启用

Firebase远程配置URL ( https://firebaseremoteconfig.googleapis.com/v1/projects/1060475036201/namespaces/firebase:fetch?key=AIzaSyCKP2vjhpKPYRnVSzK1fddtwu0OWc_l7ug ) 已启用。请确保这些配置不包含敏感信息。响应内容如下所示:

{
    "entries": {
        "ads_app_open_for_non_free_users": "false",
        "ads_copy_updates_sep_2023": "false",
        "ads_every_download": "false",
        "ads_free_country_by_ip_address": "false",
        "ads_handle_load_failure": "false",
        "ads_view_cv_interstitial": "false",
        "advice_examples_banner_ads": "true",
        "ai_assistant_auto_show": "true",
        "ai_assistant_tooltip": "true",
        "android_onboarding_paywall": "false",
        "animate_onboard_dot": "true",
        "app_open_ads": "true",
        "built_by_recruiter_shown": "false",
        "choose_language_background": "true",
        "contact_details_init_prompt": "false",
        "contact_info_advice_text_view": "false",
        "contact_info_privacy_message": "false",
        "cv_assistant_2_bearer": "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",
        "cv_assistant_accepted_rewrite": "false",
        "cv_assistant_advert": "true",
        "cv_assistant_bearer": "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",
        "cv_assistant_model_choice": "0",
        "cv_assistant_new_ui": "false",
        "cv_assistant_no_blank_details": "false",
        "cv_assistant_no_copy_button": "false",
        "cv_assistant_non_english_old_model": "false",
        "cv_assistant_retry": "false",
        "cv_assistant_show_error_state": "false",
        "cv_scan_red_text": "false",
        "cv_settings_tooltip": "false",
        "date_spinners": "true",
        "details_emoji_reaction": "false",
        "details_onboard_ai_assist": "false",
        "emoji_on_cta": "false",
        "examples_culturalized": "false",
        "first_save_confetti": "false",
        "free_for_old_devices": "false",
        "free_use_network_country_first": "false",
        "has_progress_prompts": "true",
        "honor_system_test_pricing": "false",
        "init_save_template_button_copy": "true",
        "initial_resume_image_displayed": "2",
        "is_green_onboarding_button": "false",
        "main_activity_cv_scan_visible": "true",
        "main_activity_green_ticks": "false",
        "main_activity_interview_visible": "false",
        "mark_complete_switch_visible": "true",
        "max_free_cv_assistant": "2",
        "max_free_downloads": "1",
        "nav_header_candidate_name": "true",
        "nav_header_free_country_upgrade_button": "false",
        "nav_header_name": "false",
        "nav_header_photo": "true",
        "nav_header_share_app": "true",
        "onboard_ai_assistant": "false",
        "onboard_continue_icon": "false",
        "onboard_copy": "false",
        "onboard_huge_buttons": "false",
        "onboard_new_flow": "false",
        "onboard_paywall_continue_icon": "false",
        "onboard_progress_messages": "false",
        "onboard_show_pro": "false",
        "onboard_sign_in_button_tertiary_action": "false",
        "open_drawer_on_back": "true",
        "paywall_cart_abandon_discount": "false",
        "paywall_copy_updates_ai_assistant": "false",
        "paywall_copy_updates_aug_2023": "false",
        "paywall_copy_updates_cv_hosting": "false",
        "paywall_copy_updates_cv_scan": "false",
        "paywall_copy_updates_general": "false",
        "paywall_copy_updates_unlimited_downloads": "false",
        "paywall_cv_scan_post_download": "true",
        "paywall_dismiss_icon_moves": "false",
        "paywall_handle_fetch_error": "false",
        "paywall_lifetime_first": "false",
        "paywall_lifetime_text": "false",
        "paywall_new_ui": "false",
        "paywall_new_ui_nov_2023": "false",
        "paywall_parwcc_logo": "false",
        "paywall_press_quotes": "false",
        "paywall_purple_button_only": "false",
        "paywall_reorder_selling_points": "false",
        "paywall_review_photo": "false",
        "paywall_selected_icon": "false",
        "paywall_show_user_reviews": "false",
        "paywall_ticks_animation": "false",
        "paywall_trust_logos": "false",
        "paywall_user_ratings": "false",
        "paywall_video": "false",
        "paywall_weekly_subscription": "false",
        "paywall_yearly_subscription": "false",
        "plus_activity_logo": "false",
        "plus_purchase_message_visible": "true",
        "popup_mania": "false",
        "restore_last_page": "true",
        "resume_library_enabled": "false",
        "resume_library_p": "ed2914f5cd5d",
        "resume_library_u": "975658",
        "resume_review_button_icon": "0",
        "resume_review_button_title": "Personal CV Review",
        "resume_scan_dialog_button_height": "false",
        "resume_scan_freemium": "false",
        "resume_scan_unlocked_tooltip": "false",
        "reward_ad_prompt_images": "false",
        "save_cv_button_content": "false",
        "save_template_button_enabled": "true",
        "save_template_button_size": "false",
        "save_template_button_text_size": "false",
        "save_template_button_width": "false",
        "save_template_toolbar_title_copy": "false",
        "scan_paywall_on_app_start": "false",
        "show_next_page_buttons": "false",
        "show_trust_logo": "false",
        "test_bool": "15",
        "view_cv_download_cv_button_visible": "true",
        "view_cv_tooltip": "true"
    },
    "state": "UPDATE",
    "templateVersion": "146"
}

中危安全漏洞 应用程序包含隐私跟踪程序

此应用程序有多个3隐私跟踪程序。跟踪器可以跟踪设备或用户,是终端用户的隐私问题。

中危安全漏洞 此应用可能包含硬编码机密信息

从应用程序中识别出以下机密确保这些不是机密或私人信息
AdMob广告平台的=> "com.google.android.gms.ads.APPLICATION_ID" : "@string/adMobAppId"
"REMOTE_CONFIG_KEY_CLAUDE_BEARER" : "cv_assistant_2_bearer"
"REMOTE_CONFIG_KEY_CV_ASSISTANT_ACCEPTED_REWRITE" : "cv_assistant_accepted_rewrite"
"REMOTE_CONFIG_KEY_CV_ASSISTANT_BEARER" : "cv_assistant_bearer"
"REMOTE_CONFIG_KEY_CV_ASSISTANT_MAX_FREE" : "max_free_cv_assistant"
"REMOTE_CONFIG_KEY_CV_ASSISTANT_MODEL_CHOICE" : "cv_assistant_model_choice"
"REMOTE_CONFIG_KEY_CV_ASSISTANT_NO_BLANK_DETAILS" : "cv_assistant_no_blank_details"
"REMOTE_CONFIG_KEY_CV_ASSISTANT_RETRY" : "cv_assistant_retry"
"REMOTE_CONFIG_KEY_EXAMPLES_CULTURALIZED" : "examples_culturalized"
"REMOTE_CONFIG_KEY_ONBOARDING_COPY" : "onboard_copy"
"REMOTE_CONFIG_KEY_ONBOARDING_PAYWALL" : "android_onboarding_paywall"
"REMOTE_CONFIG_KEY_ONBOARDING_PAYWALL_ICON" : "onboard_paywall_continue_icon"
"REMOTE_CONFIG_KEY_PAYWALL_COPY_AI_ASSISTANT" : "paywall_copy_updates_ai_assistant"
"REMOTE_CONFIG_KEY_PAYWALL_COPY_CV_HOSTING" : "paywall_copy_updates_cv_hosting"
"REMOTE_CONFIG_KEY_PAYWALL_COPY_CV_SCAN" : "paywall_copy_updates_cv_scan"
"REMOTE_CONFIG_KEY_PAYWALL_COPY_GENERAL" : "paywall_copy_updates_general"
"REMOTE_CONFIG_KEY_PAYWALL_COPY_UNLIMITED_DOWNLOADS" : "paywall_copy_updates_unlimited_downloads"
"REMOTE_CONFIG_KEY_PAYWALL_DISCOUNT" : "paywall_cart_abandon_discount"
"REMOTE_CONFIG_KEY_PAYWALL_PARWCC_LOGO" : "paywall_parwcc_logo"
"REMOTE_CONFIG_KEY_PAYWALL_REORDER_SELLING_POINTS" : "paywall_reorder_selling_points"
"REMOTE_CONFIG_KEY_PAYWALL_REVIEW_PHOTO" : "paywall_review_photo"
"REMOTE_CONFIG_KEY_RESUME_LIBRARY_ENABLED" : "resume_library_enabled"
"REMOTE_CONFIG_KEY_RESUME_LIBRARY_P" : "resume_library_p"
"REMOTE_CONFIG_KEY_RESUME_LIBRARY_U" : "resume_library_u"
"REMOTE_CONFIG_KEY_RESUME_SCAN_FREEMIUM" : "resume_scan_freemium"
"ad_time_downloads_key" : "sampson.cvbuilder.advert.time.downloads"
"ad_time_resume_scan_key" : "sampson.cvbuilder.advert.time.resumeScan"
"career10_key_company" : "CVBuilder2_Career_Career10_Company"
"career10_key_description" : "CVBuilder2_Career_Career10_Description"
"career10_key_end_date" : "CVBuilder2_Career_Career10_EndDate"
"career10_key_intro" : "CVBuilder2_Career_Career10_Intro"
"career10_key_job_title" : "CVBuilder2_Career_Career10_JobTitle"
"career10_key_start_date" : "CVBuilder2_Career_Career10_StartDate"
"career1_key_company" : "CVBuilder2_Career_Career1_Company"
"career1_key_description" : "CVBuilder2_Career_Career1_Description"
"career1_key_end_date" : "CVBuilder2_Career_Career1_EndDate"
"career1_key_intro" : "CVBuilder2_Career_Career1_Intro"
"career1_key_job_title" : "CVBuilder2_Career_Career1_JobTitle"
"career1_key_start_date" : "CVBuilder2_Career_Career1_StartDate"
"career2_key_company" : "CVBuilder2_Career_Career2_Company"
"career2_key_description" : "CVBuilder2_Career_Career2_Description"
"career2_key_end_date" : "CVBuilder2_Career_Career2_EndDate"
"career2_key_intro" : "CVBuilder2_Career_Career2_Intro"
"career2_key_job_title" : "CVBuilder2_Career_Career2_JobTitle"
"career2_key_start_date" : "CVBuilder2_Career_Career2_StartDate"
"career3_key_company" : "CVBuilder2_Career_Career3_Company"
"career3_key_description" : "CVBuilder2_Career_Career3_Description"
"career3_key_end_date" : "CVBuilder2_Career_Career3_EndDate"
"career3_key_intro" : "CVBuilder2_Career_Career3_Intro"
"career3_key_job_title" : "CVBuilder2_Career_Career3_JobTitle"
"career3_key_start_date" : "CVBuilder2_Career_Career3_StartDate"
"career4_key_company" : "CVBuilder2_Career_Career4_Company"
"career4_key_description" : "CVBuilder2_Career_Career4_Description"
"career4_key_end_date" : "CVBuilder2_Career_Career4_EndDate"
"career4_key_intro" : "CVBuilder2_Career_Career4_Intro"
"career4_key_job_title" : "CVBuilder2_Career_Career4_JobTitle"
"career4_key_start_date" : "CVBuilder2_Career_Career4_StartDate"
"career5_key_company" : "CVBuilder2_Career_Career5_Company"
"career5_key_description" : "CVBuilder2_Career_Career5_Description"
"career5_key_end_date" : "CVBuilder2_Career_Career5_EndDate"
"career5_key_intro" : "CVBuilder2_Career_Career5_Intro"
"career5_key_job_title" : "CVBuilder2_Career_Career5_JobTitle"
"career5_key_start_date" : "CVBuilder2_Career_Career5_StartDate"
"career6_key_company" : "CVBuilder2_Career_Career6_Company"
"career6_key_description" : "CVBuilder2_Career_Career6_Description"
"career6_key_end_date" : "CVBuilder2_Career_Career6_EndDate"
"career6_key_intro" : "CVBuilder2_Career_Career6_Intro"
"career6_key_job_title" : "CVBuilder2_Career_Career6_JobTitle"
"career6_key_start_date" : "CVBuilder2_Career_Career6_StartDate"
"career7_key_company" : "CVBuilder2_Career_Career7_Company"
"career7_key_description" : "CVBuilder2_Career_Career7_Description"
"career7_key_end_date" : "CVBuilder2_Career_Career7_EndDate"
"career7_key_intro" : "CVBuilder2_Career_Career7_Intro"
"career7_key_job_title" : "CVBuilder2_Career_Career7_JobTitle"
"career7_key_start_date" : "CVBuilder2_Career_Career7_StartDate"
"career8_key_company" : "CVBuilder2_Career_Career8_Company"
"career8_key_description" : "CVBuilder2_Career_Career8_Description"
"career8_key_end_date" : "CVBuilder2_Career_Career8_EndDate"
"career8_key_intro" : "CVBuilder2_Career_Career8_Intro"
"career8_key_job_title" : "CVBuilder2_Career_Career8_JobTitle"
"career8_key_start_date" : "CVBuilder2_Career_Career8_StartDate"
"career9_key_company" : "CVBuilder2_Career_Career9_Company"
"career9_key_description" : "CVBuilder2_Career_Career9_Description"
"career9_key_end_date" : "CVBuilder2_Career_Career9_EndDate"
"career9_key_intro" : "CVBuilder2_Career_Career9_Intro"
"career9_key_job_title" : "CVBuilder2_Career_Career9_JobTitle"
"career9_key_start_date" : "CVBuilder2_Career_Career9_StartDate"
"career_key_chosen_section" : "CVBuilder2_Career_chosenSection"
"com.google.firebase.crashlytics.mapping_file_id" : "7570e72ba9734e1f950cdc859e606cc8"
"contact_key_address" : "CVBuilder2_ContactDetails_Address"
"contact_key_custom_value_1" : "CVBuilder2_ContactDetails_CustomValue1"
"contact_key_custom_value_2" : "CVBuilder2_ContactDetails_CustomValue2"
"contact_key_custom_value_3" : "CVBuilder2_ContactDetails_CustomValue3"
"contact_key_custom_value_4" : "CVBuilder2_ContactDetails_CustomValue4"
"contact_key_dob" : "CVBuilder2_ContactDetails_DateOfBirth"
"contact_key_email" : "CVBuilder2_ContactDetails_Email"
"contact_key_linkedin" : "CVBuilder2_ContactDetails_LinkedIn"
"contact_key_mobile" : "CVBuilder2_ContactDetails_Mobile"
"contact_key_name" : "CVBuilder2_ContactDetails_Name"
"crashlytics_key_ads_or_purchases" : "ads_or_purchases"
"crashlytics_key_country" : "user_country"
"crashlytics_key_device_performance_class" : "android_perf_class"
"crashlytics_key_has_plus_purchase" : "has_plus_purchase"
"crashlytics_key_user_language" : "user_language"
"cv_assistant_has_seen_advert_key" : "sampson.cvbuilder.cvAssistant.hasSeenAdvert"
"cv_assistant_key_accepted_rewrites" : "sampson.cvbuilder.cvAssistant.acceptedRewrites"
"cv_assistant_usage_key" : "sampson.cvbuilder.cvAssistant.usage"
"cv_language_selected_key" : "CVBuilder2_CV_LANGUAGE_SELECTED"
"cv_setting_key_margin" : "CVBuilder2_CV_Settings_Margin"
"cv_setting_key_name_font" : "CVBuilder2_CV_Settings_NameFont"
"cv_setting_key_normal_font" : "CVBuilder2_CV_Settings_NormalFont"
"cv_template_color_index_key" : "CVBuilder2_CV_Template_Color_Index"
"cv_template_key" : "CVBuilder2_CV_Template"
"cv_template_page_size_key" : "CVBuilder2_CV_Template_Page_Size"
"date_key_first_seen" : "sampson.cvbuilder.date.firstSeen"
"day_night_key_has_set_mode" : "sampson.cvbuilder.hasSetDayNightMode"
"day_night_key_is_day_mode" : "sampson.cvbuilder.isDayMode"
"edu1_key_description" : "CVBuilder2_Education_Edu1_Description"
"edu1_key_end_date" : "CVBuilder2_Education_Edu1_EndDate"
"edu1_key_grade" : "CVBuilder2_Education_Edu1_Grade"
"edu1_key_institution" : "CVBuilder2_Education_Edu1_Institution"
"edu1_key_qualification" : "CVBuilder2_Education_Edu1_Qualification"
"edu1_key_start_date" : "CVBuilder2_Education_Edu1_StartDate"
"edu2_key_description" : "CVBuilder2_Education_Edu2_Description"
"edu2_key_end_date" : "CVBuilder2_Education_Edu2_EndDate"
"edu2_key_grade" : "CVBuilder2_Education_Edu2_Grade"
"edu2_key_institution" : "CVBuilder2_Education_Edu2_Institution"
"edu2_key_qualification" : "CVBuilder2_Education_Edu2_Qualification"
"edu2_key_start_date" : "CVBuilder2_Education_Edu2_StartDate"
"edu3_key_description" : "CVBuilder2_Education_Edu3_Description"
"edu3_key_end_date" : "CVBuilder2_Education_Edu3_EndDate"
"edu3_key_grade" : "CVBuilder2_Education_Edu3_Grade"
"edu3_key_institution" : "CVBuilder2_Education_Edu3_Institution"
"edu3_key_qualification" : "CVBuilder2_Education_Edu3_Qualification"
"edu3_key_start_date" : "CVBuilder2_Education_Edu3_StartDate"
"edu4_key_description" : "CVBuilder2_Education_Edu4_Description"
"edu4_key_end_date" : "CVBuilder2_Education_Edu4_EndDate"
"edu4_key_grade" : "CVBuilder2_Education_Edu4_Grade"
"edu4_key_institution" : "CVBuilder2_Education_Edu4_Institution"
"edu4_key_qualification" : "CVBuilder2_Education_Edu4_Qualification"
"edu4_key_start_date" : "CVBuilder2_Education_Edu4_StartDate"
"edu5_key_description" : "CVBuilder2_Education_Edu5_Description"
"edu5_key_end_date" : "CVBuilder2_Education_Edu5_EndDate"
"edu5_key_grade" : "CVBuilder2_Education_Edu5_Grade"
"edu5_key_institution" : "CVBuilder2_Education_Edu5_Institution"
"edu5_key_qualification" : "CVBuilder2_Education_Edu5_Qualification"
"edu5_key_start_date" : "CVBuilder2_Education_Edu5_StartDate"
"edu6_key_description" : "CVBuilder2_Education_Edu6_Description"
"edu6_key_end_date" : "CVBuilder2_Education_Edu6_EndDate"
"edu6_key_grade" : "CVBuilder2_Education_Edu6_Grade"
"edu6_key_institution" : "CVBuilder2_Education_Edu6_Institution"
"edu6_key_qualification" : "CVBuilder2_Education_Edu6_Qualification"
"edu6_key_start_date" : "CVBuilder2_Education_Edu6_StartDate"
"edu7_key_description" : "CVBuilder2_Education_Edu7_Description"
"edu7_key_end_date" : "CVBuilder2_Education_Edu7_EndDate"
"edu7_key_grade" : "CVBuilder2_Education_Edu7_Grade"
"edu7_key_institution" : "CVBuilder2_Education_Edu7_Institution"
"edu7_key_qualification" : "CVBuilder2_Education_Edu7_Qualification"
"edu7_key_start_date" : "CVBuilder2_Education_Edu7_StartDate"
"edu8_key_description" : "CVBuilder2_Education_Edu8_Description"
"edu8_key_end_date" : "CVBuilder2_Education_Edu8_EndDate"
"edu8_key_grade" : "CVBuilder2_Education_Edu8_Grade"
"edu8_key_institution" : "CVBuilder2_Education_Edu8_Institution"
"edu8_key_qualification" : "CVBuilder2_Education_Edu8_Qualification"
"edu8_key_start_date" : "CVBuilder2_Education_Edu8_StartDate"
"education_key_chosen_section" : "CVBuilder2_Education_chosenSection"
"firebase_database_url" : "https://cvbuilder2-468cc.firebaseio.com"
"firebase_user_property_ads_or_purchases" : "ads_or_purchases"
"firebase_user_property_device_performance_class" : "android_perf_class"
"firebase_user_property_has_plus_purchase" : "has_plus_purchase"
"firebase_user_property_user_language" : "user_language"
"firebase_web_host" : "CHANGE-ME"
"first_session_key" : "sampson.cvbuilder.firstAppSession"
"first_start_key" : "sampson.cvbuilder.firstAppStart"
"google_api_key" : "AIzaSyCKP2vjhpKPYRnVSzK1fddtwu0OWc_l7ug"
"google_app_id" : "1:1060475036201:android:e3d53aad3c4d9e02"
"google_crash_reporting_api_key" : "AIzaSyCKP2vjhpKPYRnVSzK1fddtwu0OWc_l7ug"
"has_ad_blocker_key" : "sampson.cvbuilder.hasAdBlocker"
"has_synced_purchases_key" : "sampson.cvbuilder.hasSyncedPurchases"
"hosted_cv_screen_type_key" : "sampson.cvbuilder.hostedCv.screenType"
"interests_key" : "CVBuilder2_Interests_Key"
"intro_key" : "CVBuilder2_Introduction_Key"
"is_free_has_paid_key" : "sampson.cvbuilder.isFreeHasPaid"
"key_skills_key" : "CVBuilder2_KeySkills_Key"
"mmkv_key" : "sampson.cvbuilder.mmkv"
"page_selected_key" : "sampson.cvbuilder.pageSelected"
"proj10_key_description" : "CVBuilder2_Projects_Proj10_Description"
"proj10_key_end_date" : "CVBuilder2_Projects_Proj10_EndDate"
"proj10_key_project_title" : "CVBuilder2_Projects_Proj10_ProjectTitle"
"proj10_key_start_date" : "CVBuilder2_Projects_Proj10_StartDate"
"proj1_key_description" : "CVBuilder2_Projects_Proj1_Description"
"proj1_key_end_date" : "CVBuilder2_Projects_Proj1_EndDate"
"proj1_key_project_title" : "CVBuilder2_Projects_Proj1_ProjectTitle"
"proj1_key_start_date" : "CVBuilder2_Projects_Proj1_StartDate"
"proj2_key_description" : "CVBuilder2_Projects_Proj2_Description"
"proj2_key_end_date" : "CVBuilder2_Projects_Proj2_EndDate"
"proj2_key_project_title" : "CVBuilder2_Projects_Proj2_ProjectTitle"
"proj2_key_start_date" : "CVBuilder2_Projects_Proj2_StartDate"
"proj3_key_description" : "CVBuilder2_Projects_Proj3_Description"
"proj3_key_end_date" : "CVBuilder2_Projects_Proj3_EndDate"
"proj3_key_project_title" : "CVBuilder2_Projects_Proj3_ProjectTitle"
"proj3_key_start_date" : "CVBuilder2_Projects_Proj3_StartDate"
"proj4_key_description" : "CVBuilder2_Projects_Proj4_Description"
"proj4_key_end_date" : "CVBuilder2_Projects_Proj4_EndDate"
"proj4_key_project_title" : "CVBuilder2_Projects_Proj4_ProjectTitle"
"proj4_key_start_date" : "CVBuilder2_Projects_Proj4_StartDate"
"proj5_key_description" : "CVBuilder2_Projects_Proj5_Description"
"proj5_key_end_date" : "CVBuilder2_Projects_Proj5_EndDate"
"proj5_key_project_title" : "CVBuilder2_Projects_Proj5_ProjectTitle"
"proj5_key_start_date" : "CVBuilder2_Projects_Proj5_StartDate"
"proj6_key_description" : "CVBuilder2_Projects_Proj6_Description"
"proj6_key_end_date" : "CVBuilder2_Projects_Proj6_EndDate"
"proj6_key_project_title" : "CVBuilder2_Projects_Proj6_ProjectTitle"
"proj6_key_start_date" : "CVBuilder2_Projects_Proj6_StartDate"
"proj7_key_description" : "CVBuilder2_Projects_Proj7_Description"
"proj7_key_end_date" : "CVBuilder2_Projects_Proj7_EndDate"
"proj7_key_project_title" : "CVBuilder2_Projects_Proj7_ProjectTitle"
"proj7_key_start_date" : "CVBuilder2_Projects_Proj7_StartDate"
"proj8_key_description" : "CVBuilder2_Projects_Proj8_Description"
"proj8_key_end_date" : "CVBuilder2_Projects_Proj8_EndDate"
"proj8_key_project_title" : "CVBuilder2_Projects_Proj8_ProjectTitle"
"proj8_key_start_date" : "CVBuilder2_Projects_Proj8_StartDate"
"proj9_key_description" : "CVBuilder2_Projects_Proj9_Description"
"proj9_key_end_date" : "CVBuilder2_Projects_Proj9_EndDate"
"proj9_key_project_title" : "CVBuilder2_Projects_Proj9_ProjectTitle"
"proj9_key_start_date" : "CVBuilder2_Projects_Proj9_StartDate"
"projects_key_chosen_section" : "CVBuilder2_Projects_chosenSection"
"provided_rating_key" : "sampson.cvbuilder.providedRating"
"rating_time_in_app_key" : "sampson.cvbuilder.rating.time.inApp"
"rating_time_play_store_key" : "sampson.cvbuilder.rating.time.playStore"
"ref1_key_company" : "CVBuilder2_References_Ref1_Company"
"ref1_key_email" : "CVBuilder2_References_Ref1_Email"
"ref1_key_job_title" : "CVBuilder2_References_Ref1_JobTitle"
"ref1_key_mobile" : "CVBuilder2_References_Ref1_Mobile"
"ref1_key_name" : "CVBuilder2_References_Ref1_Name"
"ref2_key_company" : "CVBuilder2_References_Ref2_Company"
"ref2_key_email" : "CVBuilder2_References_Ref2_Email"
"ref2_key_job_title" : "CVBuilder2_References_Ref2_JobTitle"
"ref2_key_mobile" : "CVBuilder2_References_Ref2_Mobile"
"ref2_key_name" : "CVBuilder2_References_Ref2_Name"
"ref3_key_company" : "CVBuilder2_References_Ref3_Company"
"ref3_key_email" : "CVBuilder2_References_Ref3_Email"
"ref3_key_job_title" : "CVBuilder2_References_Ref3_JobTitle"
"ref3_key_mobile" : "CVBuilder2_References_Ref3_Mobile"
"ref3_key_name" : "CVBuilder2_References_Ref3_Name"
"ref4_key_company" : "CVBuilder2_References_Ref4_Company"
"ref4_key_email" : "CVBuilder2_References_Ref4_Email"
"ref4_key_job_title" : "CVBuilder2_References_Ref4_JobTitle"
"ref4_key_mobile" : "CVBuilder2_References_Ref4_Mobile"
"ref4_key_name" : "CVBuilder2_References_Ref4_Name"
"references_key_chosen_section" : "CVBuilder2_References_chosenSection"
"resignation_letter_key_company" : "sampson.cvbuilder.resignationLetter.company"
"resignation_letter_key_job_title" : "sampson.cvbuilder.resignationLetter.jobTitle"
"resignation_letter_key_last_day" : "sampson.cvbuilder.resignationLetter.lastDay"
"restore_page_key" : "sampson.cvbuilder.restorePage"
"resume_library_key_candidate_number" : "sampson.cvbuilder.resumeLibrary.candidateNumber"
"resume_library_key_enabled" : "sampson.cvbuilder.resumeLibrary.enabled"
"shared_pref_key" : "sampson.cvbuilder.sharedPreferences"
"shared_pref_to_mmkv_migration_key" : "sampson.cvbuilder.sharedPrefToMmkvMigration"
"tooltip_cv_settings_key" : "sampson.cvbuilder.tooltip.cvSettings"
"tooltip_view_cv_key" : "sampson.cvbuilder.tooltip.viewCv"
"user_defined_key_city" : "sampson.cvbuilder.userDefined.city"
"user_defined_key_country_code" : "sampson.cvbuilder.userDefined.countryCode"
"user_defined_key_job_types" : "sampson.cvbuilder.userDefined.acceptableJobTypes"
"user_defined_key_state_code" : "sampson.cvbuilder.userDefined.stateCode"
"user_named_2_key_details" : "CVBuilder2_UserNamed_2_Details"
"user_named_2_key_title" : "CVBuilder2_UserNamed_2_Title"
"user_named_3_key_details" : "CVBuilder2_UserNamed_3_Details"
"user_named_3_key_title" : "CVBuilder2_UserNamed_3_Title"
"user_named_4_key_details" : "CVBuilder2_UserNamed_4_Details"
"user_named_4_key_title" : "CVBuilder2_UserNamed_4_Title"
"user_named_5_key_details" : "CVBuilder2_UserNamed_5_Details"
"user_named_5_key_title" : "CVBuilder2_UserNamed_5_Title"
"user_named_6_key_details" : "CVBuilder2_UserNamed_6_Details"
"user_named_6_key_title" : "CVBuilder2_UserNamed_6_Title"
"user_named_7_key_details" : "CVBuilder2_UserNamed_7_Details"
"user_named_7_key_title" : "CVBuilder2_UserNamed_7_Title"
"user_named_8_key_details" : "CVBuilder2_UserNamed_8_Details"
"user_named_8_key_title" : "CVBuilder2_UserNamed_8_Title"
"user_named_key_chosen_section" : "CVBuilder2_UserNamed_chosenSection"
"user_named_key_details" : "CVBuilder2_UserNamed_Details"
"user_named_key_title" : "CVBuilder2_UserNamed_Title"
"view_cv_key_paper_size_selected" : "CVBuilder2_ViewCv_PaperSize_Selected"
470fa2b4ae81cd56ecbcda9735803434cec591fa
UC1upXWg5QVmyOSwozp755xLqquBKjjU+di6U8QhMlM=
c103703e120ae8cc73c9248622f3cd1e
5d087e32b51bae39f7787ff10c3c7f99

安全提示信息 应用程序记录日志信息,不得记录敏感信息

应用程序记录日志信息,不得记录敏感信息
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#logs

Files:
A/J0.java, line(s) 283
A0/C0117e.java, line(s) 964,1065,1066
A0/z.java, line(s) 484,121,135,346,122,136,347,194,198,608
A4/C1221c.java, line(s) 71
A4/c.java, line(s) 72
A6/b.java, line(s) 62,67,114
A6/g.java, line(s) 90
A6/m.java, line(s) 161,206,233,69,70,106,107,205,232,228,305
A6/q.java, line(s) 48
A6/t.java, line(s) 140,295,139
B1/b.java, line(s) 74,83
B1/c.java, line(s) 38
B2/g.java, line(s) 78,158
B2/i.java, line(s) 25,38
B2/j.java, line(s) 61
C/C0150k.java, line(s) 2373,772
C1/C0321a.java, line(s) 143
C1/C1414a.java, line(s) 143
C1/e.java, line(s) 49,54
C1/h.java, line(s) 59
C1/i.java, line(s) 39,71
C1/j.java, line(s) 56,135
C1/l.java, line(s) 44,103,117,139,155
D1/c.java, line(s) 32
D2/C1517d.java, line(s) 247,263,250
D2/d.java, line(s) 239,254,242
D8/J0.java, line(s) 233
E5/C0477d.java, line(s) 86,109,85,108
E5/C1564d.java, line(s) 89,112,88,111
E5/E.java, line(s) 57
E5/H.java, line(s) 54
E5/L.java, line(s) 25,27
E5/M.java, line(s) 31,33
E5/P.java, line(s) 34,37,41
E5/Q.java, line(s) 26,28,36,38
E5/S.java, line(s) 68,73
E5/T.java, line(s) 28,30,38,40
E6/C0075n.java, line(s) 15,22
E6/C0290m.java, line(s) 81,96,144,107,102
E6/C0291n.java, line(s) 17,24
E6/C0301y.java, line(s) 31
E6/S.java, line(s) 58,67,57
E6/T.java, line(s) 32,24
E6/V.java, line(s) 59,71,87,77
E6/W.java, line(s) 24,33
E6/Y.java, line(s) 35,56,61,92,95
E7/C0483c.java, line(s) 18,21
E7/C1594c.java, line(s) 19,22
F5/B.java, line(s) 24,28
F5/C0076b.java, line(s) 38
F5/C0078d.java, line(s) 81,116
F5/C0086n.java, line(s) 34
F5/C0087p.java, line(s) 74
F5/C0088s.java, line(s) 76
F5/C0331d.java, line(s) 91,128
F5/C0341n.java, line(s) 38
F5/C0343p.java, line(s) 75
F5/C0344q.java, line(s) 88
F5/C0345s.java, line(s) 80
F5/H.java, line(s) 33
F5/I.java, line(s) 29
F5/O.java, line(s) 32,48,59,68,77
F5/r.java, line(s) 35
F5/t.java, line(s) 49,74,56,62
F5/u.java, line(s) 82
F5/y.java, line(s) 809,812,813,827,830
F7/AbstractC0512c.java, line(s) 514
F7/AbstractC1655c.java, line(s) 867
F8/AbstractC1658a.java, line(s) 741,750,765,776,788,797,811,825,836,517
F8/a.java, line(s) 714,723,738,749,761,770,784,798,809,490
G/AbstractC1669j.java, line(s) 165,170
G3/c.java, line(s) 354,355
G3/d.java, line(s) 236
G5/d.java, line(s) 29
G5/h.java, line(s) 71
G8/C.java, line(s) 288
G8/C1701c.java, line(s) 395
G9/AbstractC0521d.java, line(s) 221,1500
G9/AbstractC0529l.java, line(s) 1499
G9/AbstractC1705d.java, line(s) 300,2170
G9/AbstractC1713l.java, line(s) 1886
G9/C1715n.java, line(s) 47,47
H0/C0469r1.java, line(s) 64
H0/Q.java, line(s) 631
H0/R1.java, line(s) 66
H2/d.java, line(s) 24,23
H4/C1787d.java, line(s) 18
H4/C1788e.java, line(s) 30
H4/d.java, line(s) 18
H4/e.java, line(s) 29
H5/AbstractC0534d.java, line(s) 24,25
H5/AbstractC1792d.java, line(s) 25,26
H5/u.java, line(s) 22,31,30,36,37
H6/b.java, line(s) 40
H6/d.java, line(s) 53,60
H6/e.java, line(s) 50,52,67
I1/a.java, line(s) 41
J2/AbstractC0391a.java, line(s) 30
J2/AbstractC1873a.java, line(s) 30
J2/C0084m.java, line(s) 116
J2/C0532m.java, line(s) 118
J3/c.java, line(s) 20,30
J4/C1883b.java, line(s) 43
J4/C1884c.java, line(s) 56,62
J4/C1885d.java, line(s) 51,58
J4/C1886e.java, line(s) 34
J4/b.java, line(s) 43
J4/c.java, line(s) 52,57
J4/d.java, line(s) 47,53
J4/e.java, line(s) 33
J4/g.java, line(s) 59,66,130,139,154,163,103
J4/h.java, line(s) 35
J4/i.java, line(s) 46,53,87,93
J5/a.java, line(s) 38,39
J5/b.java, line(s) 35,34
J5/c.java, line(s) 75,70,81,87
K1/C0405c.java, line(s) 245
K1/C1912c.java, line(s) 408
K2/r.java, line(s) 88,91
K5/h.java, line(s) 430,437,429,436
K5/o.java, line(s) 94
M1/B.java, line(s) 86
M1/C0133l.java, line(s) 43,49
M1/C0136q.java, line(s) 32,45,91,148,191,208,232
M1/C0606b.java, line(s) 88
M1/C0616l.java, line(s) 45,51
M1/C0621q.java, line(s) 32,45,91,148,191,208,232
M1/S.java, line(s) 142,123,141
M1/T.java, line(s) 21,32
M1/h0.java, line(s) 37,49,56,65
M1/l0.java, line(s) 74,90,65
M3/g.java, line(s) 67
M3/z.java, line(s) 44,48,10,53
M5/C.java, line(s) 93
M5/h.java, line(s) 47,118
M5/j.java, line(s) 27
M5/l.java, line(s) 40,47,48,56
M5/m.java, line(s) 34,33,46,47
M5/o.java, line(s) 33,34,27
M5/q.java, line(s) 95,251,272,290,384,330,356,94,116,250,271,289,320,325,358,373,383,117,321,326,374,286,296,317,361
M5/s.java, line(s) 31,42,43,27
M5/t.java, line(s) 93,114,99,119,121,123,137,78,92,113,79,87
M5/v.java, line(s) 37,26,30,36
M5/y.java, line(s) 27,35,42,26,34,41
N/h.java, line(s) 84,134,146,156
N/i.java, line(s) 166
N3/f.java, line(s) 39,50,53
N3/h.java, line(s) 42,43
N3/m.java, line(s) 367
N5/d.java, line(s) 32,64
N5/g.java, line(s) 137,164,75,136,163,53,66,97,143,193,230,263
N5/l.java, line(s) 35,58
N6/M.java, line(s) 338,342,346,358,362,366,333,375,491,504,511
N9/f.java, line(s) 178,223
O/D.java, line(s) 285
O/MenuC2140k.java, line(s) 552
O/ViewOnKeyListenerC2134e.java, line(s) 441
O/v.java, line(s) 568,569,545
O2/C0489b.java, line(s) 91,96,103,107,122,130
O2/C2191b.java, line(s) 92,97,104,108,123,131
O5/M.java, line(s) 51,234,227,50,220,230,233,221,231
O5/o0.java, line(s) 133,860,276
P/AbstractC0505f0.java, line(s) 21
P/AbstractC2275f0.java, line(s) 20
P/C0513j0.java, line(s) 88,97,190
P/C0531w.java, line(s) 181
P/C2283j0.java, line(s) 90,99,192
P/C2303u.java, line(s) 67
P/C2307w.java, line(s) 234
P/H0.java, line(s) 269,82,87,94,190,252
P/L.java, line(s) 41,70,75,80
P/M0.java, line(s) 23
P/O0.java, line(s) 25,34,44,54
P/U0.java, line(s) 32
P/h1.java, line(s) 125,214
P/i1.java, line(s) 115,76
P1/j.java, line(s) 17,16
P2/C0565c.java, line(s) 103,111
P2/C0574l.java, line(s) 180,286
P2/C2360c.java, line(s) 103,111
P2/C2369l.java, line(s) 181,287
P2/j.java, line(s) 322,318
P2/r.java, line(s) 479
P3/l.java, line(s) 65
P6/e.java, line(s) 132,167,131
P7/c.java, line(s) 34
P7/d.java, line(s) 21,23,26
Q1/C2406a.java, line(s) 76
Q1/a.java, line(s) 66
R6/C2449c.java, line(s) 214,362
R9/S.java, line(s) 75
S1/f.java, line(s) 222
S1/n.java, line(s) 62
T/AbstractC0629h.java, line(s) 45
T/AbstractC2526h.java, line(s) 45
T1/h.java, line(s) 157
T5/AbstractC0460b.java, line(s) 1434,1438,1442,1482
T5/AbstractC2540b.java, line(s) 1843,1847,1851,1891
T5/e.java, line(s) 20
T5/g.java, line(s) 270,277,71,75,81,84,191
U1/AbstractC0640b.java, line(s) 64,73
U1/AbstractC2588b.java, line(s) 69,108,117
U1/f.java, line(s) 51
U1/i.java, line(s) 363,423,426
U1/m.java, line(s) 620,1360,1721,1727,1735,1778,1784,1792,1802,1809,1818,1833,1840,1849,2025,2030,2037,2183,2185,1914,333,722,1498,1513,1669
V/F0.java, line(s) 367
V2/e.java, line(s) 18
W0/y.java, line(s) 288
W2/j.java, line(s) 200,203,227
W3/a.java, line(s) 151,520,205,616,617,206,388,396,516
X3/d.java, line(s) 71
X4/g.java, line(s) 131
Y0/AbstractC2765c.java, line(s) 410
Y0/c.java, line(s) 347
Y1/AbstractC2774f.java, line(s) 54,57,84
Y1/C0680A.java, line(s) 35
Y1/C2768A.java, line(s) 36
Y1/C2772d.java, line(s) 54
Y1/d.java, line(s) 53
Y2/c.java, line(s) 521,520
Z1/AbstractC2864a.java, line(s) 115
Z2/AbstractC2868d.java, line(s) 63,72
Z2/e.java, line(s) 457,345,353
Z4/d.java, line(s) 36
Z4/h.java, line(s) 170,174
b0/b.java, line(s) 111
b5/a.java, line(s) 29
com/firebase/ui/auth/ui/credentials/CredentialSaveActivity.java, line(s) 67,70,38
com/revenuecat/purchases/common/DefaultLogHandler.java, line(s) 14,22,24,32,39,46
com/vungle/ads/internal/util/l.java, line(s) 27,37,50,69,82,90,103
com/vungle/mediation/VungleInterstitialAdapter.java, line(s) 36,41,46,83,65,76,93,100
com/yalantis/ucrop/UCropActivity.java, line(s) 548
com/yalantis/ucrop/task/BitmapCropTask.java, line(s) 167,117
com/yalantis/ucrop/task/BitmapLoadTask.java, line(s) 74,116,185,191,200,208,239,242
com/yalantis/ucrop/util/BitmapLoadUtils.java, line(s) 55,103,117
com/yalantis/ucrop/util/EglUtils.java, line(s) 45
com/yalantis/ucrop/util/ImageHeaderParser.java, line(s) 129,140,151,157,163,174,181,188,199,238,248,262,276,296,306,309,312,315,318,332,337,346,355,237,247,259,275,291,305,308,311,314,317,331,336,345,354
com/yalantis/ucrop/view/TransformImageView.java, line(s) 143,198,229,246
e9/b.java, line(s) 65
f2/C1624b.java, line(s) 153
f2/C1626d.java, line(s) 217,225,268,280,292,304,316,328,340,352,359,370,382,365
f2/b.java, line(s) 153
f2/h.java, line(s) 359,369,375,384,433,655,706,780,938,955,959,973,983,994,1001,1097,1220,1371,1443,1520,1566,1586,1600,1634,1656,1718,1763,1766,1800,94,644,664,672,902,906,910,1031,1040,1342,1347,1495
g2/c.java, line(s) 26
g6/q.java, line(s) 75,100
ga/y.java, line(s) 218,220
h9/C1815d.java, line(s) 39
h9/d.java, line(s) 38
ha/d.java, line(s) 184
i0/f.java, line(s) 21
i4/AbstractC1836b.java, line(s) 56,63,98,108
i4/C1835a.java, line(s) 34
i4/a.java, line(s) 33
j/LayoutInflaterFactory2C0396A.java, line(s) 1036,1038,1040,511,597,600,928
j/LayoutInflaterFactory2C1849A.java, line(s) 1442,1773,1775,1777,651,778,781,1051,1062,1665
j/q.java, line(s) 42,69
j/r.java, line(s) 65,73
j/x.java, line(s) 81,98,128
j1/d.java, line(s) 22,34
j1/n.java, line(s) 117
j6/b.java, line(s) 224,248,95,146,223,247,55,60,208,251
k7/a.java, line(s) 55,58,68
o6/C0663g.java, line(s) 948
o6/C2215g.java, line(s) 979
p4/f.java, line(s) 139
q4/i.java, line(s) 31
r2/d.java, line(s) 57,114,149
r2/f.java, line(s) 94,94,106,183,126,140,165
r2/i.java, line(s) 68,78,106
r5/a.java, line(s) 120
s5/c.java, line(s) 71,70
s6/c.java, line(s) 58,69
t6/C2544c.java, line(s) 237,242,91,92,228,230
u4/C2599c.java, line(s) 96,95
u4/d.java, line(s) 92,126
v3/a.java, line(s) 17,21
x/a.java, line(s) 115,121,113
x9/b.java, line(s) 113,115
y/a.java, line(s) 39,48,53,62,71,40,49,54,63,72
y6/C2791c.java, line(s) 402,554,586,758,560,563,594,613,638,676,770,401,553,585,589,602,757,781,590,603,782,362,380
y9/C2811d.java, line(s) 152,203,209,218,164,180
z3/d.java, line(s) 97
z6/C2887a.java, line(s) 51,67,53,64

安全提示信息 此应用程序将数据复制到剪贴板。敏感数据不应复制到剪贴板,因为其他应用程序可以访问它

此应用程序将数据复制到剪贴板。敏感数据不应复制到剪贴板,因为其他应用程序可以访问它
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x04b-Mobile-App-Security-Testing.md#clipboard

Files:
G9/a.java, line(s) 5,67

安全提示信息 应用与Firebase数据库通信

该应用与位于 https://cvbuilder2-468cc.firebaseio.com 的 Firebase 数据库进行通信

已通过安全项 此应用程序使用SSL Pinning 来检测或防止安全通信通道中的MITM攻击

此应用程序使用SSL Pinning 来检测或防止安全通信通道中的MITM攻击
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05g-Testing-Network-Communication.md#testing-custom-certificate-stores-and-certificate-pinning-mstg-network-4

Files:
G9/C0522e.java, line(s) 51,50,49
G9/C0525h.java, line(s) 79,69,78,86,77,77
G9/C0530m.java, line(s) 51,50,49,49
G9/C0531n.java, line(s) 105,93,104,103,103
G9/C1706e.java, line(s) 53,52,51
G9/C1709h.java, line(s) 81,71,80,88,79,79
G9/C1714m.java, line(s) 53,52,51,51
G9/C1715n.java, line(s) 182,170,181,180,180

已通过安全项 此应用程序可能具有Root检测功能

此应用程序可能具有Root检测功能
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05j-Testing-Resiliency-Against-Reverse-Engineering.md#testing-root-detection-mstg-resilience-1

Files:
E5/C0479f.java, line(s) 50
E5/C1566f.java, line(s) 53
H5/AbstractC0534d.java, line(s) 41
H5/AbstractC1792d.java, line(s) 42
M5/h.java, line(s) 105,105,106

综合安全基线评分: ( CV Engineer 18.00.47)