安全分析报告: Plus v11.7.0.3

安全分数


安全分数 45/100

风险评级


等级

  1. A
  2. B
  3. C
  4. F

严重性分布 (%)


隐私风险

2

用户/设备跟踪器


调研结果

高危 7
中危 53
信息 4
安全 1
关注 1

高危 Activity (org.telegram.ui.LaunchActivity) 的启动模式不是standard模式

Activity 不应将启动模式属性设置为 "singleTask/singleInstance",因为这会使其成为根 Activity,并可能导致其他应用程序读取调用 Intent 的内容。因此,当 Intent 包含敏感信息时,需要使用 "standard" 启动模式属性。

高危 Activity (org.telegram.ui.PopupNotificationActivity) 的启动模式不是standard模式

Activity 不应将启动模式属性设置为 "singleTask/singleInstance",因为这会使其成为根 Activity,并可能导致其他应用程序读取调用 Intent 的内容。因此,当 Intent 包含敏感信息时,需要使用 "standard" 启动模式属性。

高危 该文件是World Readable。任何应用程序都可以读取文件

该文件是World Readable。任何应用程序都可以读取文件
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#testing-local-storage-for-sensitive-data-mstg-storage-1-and-mstg-storage-2

Files:
org/telegram/ui/Components/CheckBox.java, line(s) 70
org/telegram/ui/ContactsActivity.java, line(s) 252
org/telegram/ui/DialogsActivity.java, line(s) 13370
org/telegram/ui/PopupNotificationActivity.java, line(s) 160
org/telegram/ui/PrivacyControlActivity.java, line(s) 893

高危 应用程序使用带PKCS5/PKCS7填充的加密模式CBC。此配置容易受到填充oracle攻击。

应用程序使用带PKCS5/PKCS7填充的加密模式CBC。此配置容易受到填充oracle攻击。
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#identifying-insecure-andor-deprecated-cryptographic-algorithms-mstg-crypto-4

Files:
org/telegram/ui/bots/BotBiometry.java, line(s) 321

高危 如果一个应用程序使用WebView.loadDataWithBaseURL方法来加载一个网页到WebView,那么这个应用程序可能会遭受跨站脚本攻击

如果一个应用程序使用WebView.loadDataWithBaseURL方法来加载一个网页到WebView,那么这个应用程序可能会遭受跨站脚本攻击
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05h-Testing-Platform-Interaction.md#static-analysis-7

Files:
org/telegram/ui/ArticleViewer.java, line(s) 8291,64,65
org/telegram/ui/Components/EmbedBottomSheet.java, line(s) 782,787,34,35
org/telegram/ui/web/BotWebViewContainer.java, line(s) 3902,47,48

高危 该文件是World Writable。任何应用程序都可以写入文件

该文件是World Writable。任何应用程序都可以写入文件
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#testing-local-storage-for-sensitive-data-mstg-storage-1-and-mstg-storage-2

Files:
org/telegram/ui/ThemingChatActivity.java, line(s) 563,306
org/telegram/ui/ThemingContactsActivity.java, line(s) 300

高危 已启用远程WebView调试

已启用远程WebView调试
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x04c-Tampering-and-Reverse-Engineering.md#debugging-and-tracing

Files:
org/telegram/ui/web/BotWebViewContainer.java, line(s) 426,47,48

中危 应用程序已启用明文网络流量

[android:usesCleartextTraffic=true]
应用程序打算使用明文网络流量,例如明文HTTP,FTP协议,DownloadManager和MediaPlayer。针对API级别27或更低的应用程序,默认值为“true”。针对API级别28或更高的应用程序,默认值为“false”。避免使用明文流量的主要原因是缺乏机密性,真实性和防篡改保护;网络攻击者可以窃听传输的数据,并且可以在不被检测到的情况下修改它。

中危 应用程序数据可以被备份

[android:allowBackup=true]
这个标志允许任何人通过adb备份你的应用程序数据。它允许已经启用了USB调试的用户从设备上复制应用程序数据。

中危 Service (org.telegram.messenger.GcmPushListenerService) 未被保护。

[android:exported=true]
发现 Service与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。

中危 Service (org.telegram.messenger.GoogleVoiceClientService) 未被保护。

[android:exported=true]
发现 Service与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。

中危 Activity (org.telegram.messenger.GoogleVoiceClientActivity) 未被保护。

[android:exported=true]
发现 Activity与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。

中危 Activity-Alias (org.telegram.messenger.DefaultIcon) 未被保护。

[android:exported=true]
发现 Activity-Alias与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。

中危 Activity-Alias (org.telegram.messenger.VintageIcon) 未被保护。

[android:exported=true]
发现 Activity-Alias与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。

中危 Activity-Alias (org.telegram.messenger.AquaIcon) 未被保护。

[android:exported=true]
发现 Activity-Alias与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。

中危 Activity-Alias (org.telegram.messenger.PremiumIcon) 未被保护。

[android:exported=true]
发现 Activity-Alias与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。

中危 Activity-Alias (org.telegram.messenger.TurboIcon) 未被保护。

[android:exported=true]
发现 Activity-Alias与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。

中危 Activity-Alias (org.telegram.messenger.NoxIcon) 未被保护。

[android:exported=true]
发现 Activity-Alias与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。

中危 Activity-Alias (org.telegram.messenger.DarkIcon) 未被保护。

[android:exported=true]
发现 Activity-Alias与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。

中危 Activity-Alias (org.telegram.messenger.PlusIcon) 未被保护。

[android:exported=true]
发现 Activity-Alias与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。

中危 Activity-Alias (org.telegram.ui.CallsActivity) 受权限保护, 但是应该检查权限的保护级别。

Permission: android.permission.CALL_PHONE [android:exported=true]
发现一个 Activity-Alias被共享给了设备上的其他应用程序,因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此,应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险,一个恶意应用程序可以请求并获得这个权限,并与该组件交互。如果它被设置为签名,只有使用相同证书签名的应用程序才能获得这个权限。

中危 Activity (org.telegram.ui.ShareActivity) 未被保护。

[android:exported=true]
发现 Activity与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。

中危 Activity (org.telegram.ui.ExternalActionActivity) 未被保护。

[android:exported=true]
发现 Activity与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。

中危 Activity (org.telegram.ui.ChatsWidgetConfigActivity) 未被保护。

[android:exported=true]
发现 Activity与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。

中危 Activity (org.telegram.ui.ContactsWidgetConfigActivity) 未被保护。

[android:exported=true]
发现 Activity与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。

中危 Activity (org.telegram.messenger.OpenChatReceiver) 未被保护。

[android:exported=true]
发现 Activity与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。

中危 Activity (org.telegram.messenger.OpenCategoryReceiver) 未被保护。

[android:exported=true]
发现 Activity与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。

中危 Activity (org.telegram.messenger.OpenAttachedMenuBotReceiver) 未被保护。

[android:exported=true]
发现 Activity与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。

中危 Activity设置了TaskAffinity属性

(org.telegram.ui.VoIPPermissionActivity)
如果设置了 taskAffinity,其他应用程序可能会读取发送到属于另一个任务的 Activity 的 Intent。为了防止其他应用程序读取发送或接收的 Intent 中的敏感信息,请始终使用默认设置,将 affinity 保持为包名

中危 Activity设置了TaskAffinity属性

(org.telegram.ui.VoIPFeedbackActivity)
如果设置了 taskAffinity,其他应用程序可能会读取发送到属于另一个任务的 Activity 的 Intent。为了防止其他应用程序读取发送或接收的 Intent 中的敏感信息,请始终使用默认设置,将 affinity 保持为包名

中危 Broadcast Receiver (org.telegram.messenger.SmsReceiver) 未被保护。

[android:exported=true]
发现 Broadcast Receiver与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。

中危 Service (org.telegram.messenger.AuthenticatorService) 未被保护。

[android:exported=true]
发现 Service与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。

中危 Service (org.telegram.messenger.ContactsSyncAdapterService) 未被保护。

[android:exported=true]
发现 Service与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。

中危 Service (org.telegram.messenger.BringAppForegroundService) 未被保护。

[android:exported=true]
发现 Service与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。

中危 Service (org.telegram.messenger.NotificationsService) 未被保护。

[android:exported=true]
发现 Service与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。

中危 Service (org.telegram.messenger.VideoEncodingService) 未被保护。

[android:exported=true]
发现 Service与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。

中危 Service (org.telegram.ui.Stories.recorder.StoryUploadingService) 未被保护。

[android:exported=true]
发现 Service与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。

中危 Service (org.telegram.messenger.ImportingService) 未被保护。

[android:exported=true]
发现 Service与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。

中危 Service (org.telegram.messenger.LocationSharingService) 未被保护。

[android:exported=true]
发现 Service与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。

中危 Service (org.telegram.messenger.MusicPlayerService) 未被保护。

[android:exported=true]
发现 Service与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。

中危 Service (org.telegram.messenger.MusicBrowserService) 未被保护。

[android:exported=true]
发现 Service与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。

中危 Service (org.telegram.messenger.voip.TelegramConnectionService) 受权限保护, 但是应该检查权限的保护级别。

Permission: android.permission.BIND_TELECOM_CONNECTION_SERVICE [android:exported=true]
发现一个 Service被共享给了设备上的其他应用程序,因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此,应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险,一个恶意应用程序可以请求并获得这个权限,并与该组件交互。如果它被设置为签名,只有使用相同证书签名的应用程序才能获得这个权限。

中危 Broadcast Receiver (org.telegram.messenger.RefererReceiver) 受权限保护, 但是应该检查权限的保护级别。

Permission: android.permission.INSTALL_PACKAGES [android:exported=true]
发现一个 Broadcast Receiver被共享给了设备上的其他应用程序,因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此,应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险,一个恶意应用程序可以请求并获得这个权限,并与该组件交互。如果它被设置为签名,只有使用相同证书签名的应用程序才能获得这个权限。

中危 Content Provider (org.telegram.messenger.voip.CallNotificationSoundProvider) 未被保护。

[android:exported=true]
发现 Content Provider与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。

中危 Broadcast Receiver (com.google.firebase.iid.FirebaseInstanceIdReceiver) 受权限保护, 但是应该检查权限的保护级别。

Permission: com.google.android.c2dm.permission.SEND [android:exported=true]
发现一个 Broadcast Receiver被共享给了设备上的其他应用程序,因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此,应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险,一个恶意应用程序可以请求并获得这个权限,并与该组件交互。如果它被设置为签名,只有使用相同证书签名的应用程序才能获得这个权限。

中危 Service (androidx.sharetarget.ChooserTargetServiceCompat) 受权限保护, 但是应该检查权限的保护级别。

Permission: android.permission.BIND_CHOOSER_TARGET_SERVICE [android:exported=true]
发现一个 Service被共享给了设备上的其他应用程序,因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此,应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险,一个恶意应用程序可以请求并获得这个权限,并与该组件交互。如果它被设置为签名,只有使用相同证书签名的应用程序才能获得这个权限。

中危 Service (com.google.android.gms.auth.api.signin.RevocationBoundService) 受权限保护, 但是应该检查权限的保护级别。

Permission: com.google.android.gms.auth.api.signin.permission.REVOCATION_NOTIFICATION [android:exported=true]
发现一个 Service被共享给了设备上的其他应用程序,因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此,应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险,一个恶意应用程序可以请求并获得这个权限,并与该组件交互。如果它被设置为签名,只有使用相同证书签名的应用程序才能获得这个权限。

中危 Broadcast Receiver (androidx.profileinstaller.ProfileInstallReceiver) 受权限保护, 但是应该检查权限的保护级别。

Permission: android.permission.DUMP [android:exported=true]
发现一个 Broadcast Receiver被共享给了设备上的其他应用程序,因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此,应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险,一个恶意应用程序可以请求并获得这个权限,并与该组件交互。如果它被设置为签名,只有使用相同证书签名的应用程序才能获得这个权限。

中危 应用程序可以读取/写入外部存储器,任何应用程序都可以读取写入外部存储器的数据

应用程序可以读取/写入外部存储器,任何应用程序都可以读取写入外部存储器的数据
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#external-storage

Files:
org/telegram/messenger/AndroidUtilities.java, line(s) 806,3095,805,2181,2220,2230,5324,5331
org/telegram/messenger/EmuDetector.java, line(s) 223
org/telegram/messenger/FilesMigrationService.java, line(s) 102,86,242
org/telegram/messenger/MediaController$MediaLoader.java, line(s) 149,151
org/telegram/messenger/ModuleContentProvider.java, line(s) 74,181
org/telegram/messenger/PlusUtils.java, line(s) 1280,3494,3560
org/telegram/messenger/SharedConfig.java, line(s) 1351
org/telegram/messenger/Utilities.java, line(s) 817
org/telegram/messenger/voip/VoIPController.java, line(s) 208
org/telegram/ui/CacheControlActivity.java, line(s) 237,391,1549
org/telegram/ui/Components/ChatAttachAlertDocumentLayout.java, line(s) 971,1170,1170,1170,1173
org/telegram/ui/Components/voip/VoIPHelper.java, line(s) 673,777
org/telegram/ui/ConvertThemesActivity.java, line(s) 223,342,423
org/telegram/ui/DocumentSelectActivity.java, line(s) 590,984,1163,1163,1163,1166
org/telegram/ui/PlusSettingsActivity.java, line(s) 1197,1180

中危 文件可能包含硬编码的敏感信息,如用户名、密码、密钥等

文件可能包含硬编码的敏感信息,如用户名、密码、密钥等
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#checking-memory-for-sensitive-data-mstg-storage-10

Files:
org/telegram/messenger/BuildVars.java, line(s) 38
org/telegram/messenger/ImageReceiver.java, line(s) 562
org/telegram/messenger/MediaDataController.java, line(s) 85,92,93,90
org/telegram/messenger/PlusUtils.java, line(s) 126,127,128
org/telegram/messenger/voip/Instance.java, line(s) 230,202,212
org/telegram/ui/Adapters/MentionsAdapter.java, line(s) 741
org/telegram/ui/ArticleViewer.java, line(s) 3891
org/telegram/ui/ChannelCreateActivity.java, line(s) 186
org/telegram/ui/Components/Reactions/ReactionsLayoutInBubble.java, line(s) 926
org/telegram/ui/DataAutoDownloadActivity.java, line(s) 78,93,86
org/telegram/ui/PremiumPreviewFragment.java, line(s) 2337,2282
org/telegram/ui/QrActivity.java, line(s) 296
org/telegram/ui/Stories/recorder/DualCameraView.java, line(s) 143
org/telegram/ui/TopicsFragment.java, line(s) 3124,3117

中危 应用程序使用不安全的随机数生成器

应用程序使用不安全的随机数生成器
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#weak-random-number-generators

Files:
com/carrotsearch/randomizedtesting/Xoroshiro128PlusRandom.java, line(s) 3
j$/util/concurrent/ThreadLocalRandom.java, line(s) 10
org/telegram/messenger/Utilities.java, line(s) 30
org/telegram/ui/Components/AudioVisualizerDrawable.java, line(s) 6
org/telegram/ui/Components/AvatarsDrawable.java, line(s) 12
org/telegram/ui/Components/BlobDrawable.java, line(s) 7
org/telegram/ui/Components/CircleBezierDrawable.java, line(s) 7
org/telegram/ui/Components/FlickerLoadingView.java, line(s) 13
org/telegram/ui/Components/GroupCallPipButton.java, line(s) 18
org/telegram/ui/Components/LineBlobDrawable.java, line(s) 6
org/telegram/ui/Components/SharedMediaFastScrollTooltip.java, line(s) 15
org/telegram/ui/EmojiAnimationsOverlay.java, line(s) 12
org/telegram/ui/Stars/BagRandomizer.java, line(s) 6

中危 IP地址泄露

IP地址泄露


Files:
org/telegram/messenger/BuildConfig.java, line(s) 8
org/telegram/messenger/BuildVars.java, line(s) 35
org/telegram/messenger/EmuDetector.java, line(s) 18
org/telegram/plus/UserHelper.java, line(s) 304,299,296,293,302

中危 不安全的Web视图实现。可能存在WebView任意代码执行漏洞

不安全的Web视图实现。可能存在WebView任意代码执行漏洞
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05h-Testing-Platform-Interaction.md#testing-javascript-execution-in-webviews-mstg-platform-5

Files:
org/telegram/ui/ArticleViewer.java, line(s) 8114,8109
org/telegram/ui/Components/EmbedBottomSheet.java, line(s) 759,280
org/telegram/ui/Components/WebPlayerView.java, line(s) 1175,1182
org/telegram/ui/WebviewActivity.java, line(s) 243,231
org/telegram/ui/web/BotWebViewContainer.java, line(s) 517,519,530,532,453
org/telegram/ui/web/WebInstantView.java, line(s) 516,456
org/telegram/ui/web/WebMetadataCache.java, line(s) 464,409

中危 应用程序使用SQLite数据库并执行原始SQL查询。原始SQL查询中不受信任的用户输入可能会导致SQL注入。敏感信息也应加密并写入数据库

应用程序使用SQLite数据库并执行原始SQL查询。原始SQL查询中不受信任的用户输入可能会导致SQL注入。敏感信息也应加密并写入数据库
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x04h-Testing-Code-Quality.md#injection-flaws-mstg-arch-2-and-mstg-platform-2

Files:
org/telegram/SQLite/DatabaseHandler.java, line(s) 5,6,44,51

中危 SHA-1是已知存在哈希冲突的弱哈希

SHA-1是已知存在哈希冲突的弱哈希
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#identifying-insecure-andor-deprecated-cryptographic-algorithms-mstg-crypto-4

Files:
org/telegram/messenger/Utilities.java, line(s) 348,362
org/telegram/ui/PassportActivity.java, line(s) 2030

中危 MD5是已知存在哈希冲突的弱哈希

MD5是已知存在哈希冲突的弱哈希
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#identifying-insecure-andor-deprecated-cryptographic-algorithms-mstg-crypto-4

Files:
org/telegram/messenger/MessagesController.java, line(s) 3582
org/telegram/messenger/Utilities.java, line(s) 497

中危 应用程序创建临时文件。敏感信息永远不应该被写进临时文件

应用程序创建临时文件。敏感信息永远不应该被写进临时文件


Files:
org/telegram/ui/Components/Paint/Slice.java, line(s) 24

中危 Firebase远程配置已启用

Firebase远程配置URL ( https://firebaseremoteconfig.googleapis.com/v1/projects/326898382893/namespaces/firebase:fetch?key=AIzaSyDn35qaQ9j2WRQC6fdu3VxD1bLfxxNNR3E ) 已启用。请确保这些配置不包含敏感信息。响应内容如下所示:

{
    "entries": {
        "checkForThemesCancelable": "false",
        "disableCheckForThemes": "false",
        "hidePlusDialogUntilLoaded": "false",
        "plusDialogEnabled": "-1",
        "plusDialogLink": "https://ts.la/sergio71039",
        "plusDialogSubtitle": "Click to open",
        "plusDialogThemesAppLink": "es.rafalense.telegram.themes",
        "plusDialogTitle": "Title",
        "plusDialogType": "0",
        "plusDialogTypePlayStore": "0",
        "plusLoadConsent": "false",
        "plusPromoDialogEnabled": "8",
        "plusPromoDialogEnabledLangs": "en-es-ir-pt-ru-uz-_uz",
        "plusPromoDialogHideOptionEnabled": "7",
        "plusPromoDialogId": "-1000910297",
        "plusPromoDialogUsername": "plusmsgr",
        "resetPlusDialog": "-1",
        "showPlusDialogEvenIfInstalled": "false",
        "showPlusHintDialogCell": "false"
    },
    "state": "UPDATE",
    "templateVersion": "172"
}

中危 应用程序包含隐私跟踪程序

此应用程序有多个2隐私跟踪程序。跟踪器可以跟踪设备或用户,是终端用户的隐私问题。

中危 此应用可能包含硬编码机密信息

从应用程序中识别出以下机密确保这些不是机密或私人信息
谷歌地图的=> "com.google.android.maps.v2.API_KEY" : "AIzaSyDn35qaQ9j2WRQC6fdu3VxD1bLfxxNNR3E"
"CancelPasswordResetNo" : "NEIN"
"UseProxySecret" : "Sleutel"
"UseProxySecret" : "Secret"
"NotificationsPrivateChats" : "Einzelchats"
"CancelPasswordResetNo" : "NO"
"UseProxySecret" : "Segreto
"
"CancelPasswordResetNo" : "NEE"
"PasswordCode" : "Code"
"PasscodePassword" : "Pasahitza"
"RestorePasswordNoEmailTitle" : "Spiacenti"
"TypePrivateGroup" : "Privat"
"PasswordOn" : "Ein"
"PasswordOff" : "O'chirilgan"
"UseProxyPassword" : "Wachtwoord"
"TypePrivate" : "Prywatny"
"UseProxyPassword" : "Pasahitza"
"UseProxyUsername" : "Uzantnomo"
"google_app_id" : "1:326898382893:android:886877e0f96deb9e"
"LoginPassword" : "Lozinka"
"UseProxyUsername" : "Usuario"
"LoginPassword" : "Parol"
"UsernameLinkActive" : "aktif"
"PasscodePassword" : "Senha"
"RestorePasswordNoEmailTitle" : "Pardonon"
"TypePrivateGroup" : "Xususiy"
"UseProxyUsername" : "Benutzername"
"UseProxySecret" : "Sekret"
"PasswordOff" : "No"
"CheckPasswordPerfect" : "Perfect!"
"UsernameProfileLinkActive" : "active"
"PasscodePassword" : "Parola"
"PaymentPasswordTitle" : "Password"
"ReportSpamUser" : "BLOQUEAR"
"ReportSpamUser" : "BLOKLASH"
"firebase_database_url" : "https://themegramid.firebaseio.com"
"UseProxySecret" : "Kalit"
"CheckPasswordPerfect" : "Perfetto!"
"TypePrivate" : "Xususiy"
"UseProxyUsername" : "Erabiltzaile-izena"
"CancelPasswordResetYes" : "SIM"
"RestorePasswordNoEmailTitle" : "Maaf"
"PasswordOn" : "Activada"
"UseProxySecret" : "Clave"
"UsernameProfileLinkActive" : "aktif"
"PasscodePassword" : "Contrasinal"
"LoginPassword" : "Pasahitza"
"YourPasswordSuccess" : "Success!"
"LoginPassword" : "Contrasenya"
"RestorePasswordNoEmailTitle" : "Kechirasiz"
"UseProxySecret" : "Segredo"
"CancelPasswordResetNo" : "TIDAK"
"PasswordOn" : "Pada"
"RestorePasswordNoEmailTitle" : "Sorry"
"YourPasswordSuccess" : "Listo!"
"ReplyToUser" : "Responder"
"NotificationHiddenChatUserName" : "Nutzer"
"YourPasswordSuccess" : "Sukces!"
"com.google.firebase.crashlytics.mapping_file_id" : "da57d3ccf6c94626b4a92eb964e66ab0"
"PasswordOff" : "Desactivada"
"PasswordRecovery" : "Wachtwoordherstel"
"PasscodePassword" : "Parol"
"LoginPassword" : "Senha"
"PasswordOff" : "Off"
"UseProxyPassword" : "Parol"
"YourPasswordSuccess" : "Lortuta!"
"PaymentPasswordTitle" : "Parol"
"YourPasswordSuccess" : "Sukceso!"
"LoginPassword" : "Contrasinal"
"UseProxyPassword" : "Contrasenya"
"Username" : "Gebruikersnaam"
"TypePrivateGroup" : "Pribadi"
"UsernameLinkActive" : "active"
"YourPasswordSuccess" : "Gelukt!"
"UseProxyPassword" : "Contrasinal"
"TerminateWebSessionStop" : "Zablokuj%1$s"
"PaymentPasswordTitle" : "Senha"
"NotificationHiddenChatUserName" : "User"
"PasswordOff" : "Mati"
"TypePrivate" : "Privat"
"PasswordCode" : "Codice"
"TypePrivateGroup" : "Privado"
"Username" : "Alias"
"LoginPassword" : "Passwort"
"TypePrivate" : "Privado"
"PasscodePassword" : "Contrasenya"
"TypePrivateGroup" : "Private"
"LoginPassword" : "Parola"
"PasswordOn" : "Aan"
"UseProxySecret" : "Rahasia"
"UseProxyPassword" : "Passwort"
"UseProxyPassword" : "Pasvorto"
"Username" : "Uzantnomo"
"CheckPasswordPerfect" : "Perfeito!"
"Username" : "Erabiltzaile-izena"
"UseProxyUsername" : "Username"
"PasswordOn" : "Yoqilgan"
"PasswordCode" : "Kod"
"google_crash_reporting_api_key" : "AIzaSyDn35qaQ9j2WRQC6fdu3VxD1bLfxxNNR3E"
"NotificationHiddenChatUserName" : "Usuari"
"NotificationHiddenChatUserName" : "Usuario"
"PasswordCode" : "Kodea"
"PasswordCode" : "Codi"
"PasswordOff" : "Uit"
"AutodownloadPrivateChats" : "Chats"
"ReplyToUser" : "Antworten"
"NotificationHiddenChatUserName" : "Gebruiker"
"YourPasswordSuccess" : "Bajarildi!"
"CheckPasswordPerfect" : "Perfekt!"
"PasswordOn" : "On"
"PasscodePassword" : "Passwort"
"google_api_key" : "AIzaSyDn35qaQ9j2WRQC6fdu3VxD1bLfxxNNR3E"
"AbortPasswordMenu" : "Interromp"
"UseProxyPassword" : "Senha"
"UseProxyPassword" : "Password"
"CancelPasswordResetYes" : "JA"
"TypePrivateGroup" : "Prywatna"
"YourPassword" : "Contrasenya"
"AutodownloadPrivateChats" : "Einzelchats"
"PasscodePassword" : "Pasvorto"
"NotificationHiddenChatUserName" : "Utente"
"BlockUser" : "Bloklash"
"ChannelPrivate" : "privat"
"PaymentPasswordTitle" : "Passwort"
"UsernameChecking" : "Tekshirish..."
"PasswordCode" : "Kodo"
"TypePrivate" : "Pribadi"
"PaymentPasswordEmailTitle" : "Wiederherstellung"
"RestorePasswordNoEmailTitle" : "Vaja"
"TypePrivate" : "Private"
"NotificationHiddenChatUserName" : "Pengguna"
"Username" : "Benutzername"
"PasswordCode" : "Kode"
"PasscodePassword" : "Password"
"RestorePasswordNoEmailTitle" : "Desculpe"
"YourPasswordSuccess" : "Correcte!"
"ReplyToUser" : "Rispondi"
"NotificationHiddenChatUserName" : "Foydalanuvchi"
"ReplyToUser" : "Reageren"
"LoginPassword" : "Password"
"PasscodePassword" : "Lozinka"
"TypePrivate" : "Privato"
"UseProxyUsername" : "Gebruiker"
"Username" : "Username"
"PasswordOff" : "Desativada"
"CancelPasswordResetYes" : "YES"
"YourPasswordSuccess" : "Geschafft!"
"TypePrivateGroup" : "Privato"
"LoginPassword" : "Wachtwoord"
"YourPassword" : "Parol"
"PasswordOff" : "Aus"
"YourPasswordSuccess" : "Fatto!"
"CancelPasswordResetYes" : "YA"
"BotStarsButtonWithdrawShortUntil" : "Withdraw"
"LoginPassword" : "Pasvorto"
"PasswordOn" : "Ativada"
"RestorePasswordNoEmailTitle" : "Barkatu"
"PaymentPasswordTitle" : "Contrasenya"
"RestorePasswordNoEmailTitle" : "Przepraszamy"
4ce7b649128a82434166c557547a760c
BoostingGiveawayHowItWorksSubTextDateSeveralEnd1
BoostingGiveawayHowItWorksSubTextSeveralEnd1
1234567891011123654897566536223
8c9dbfe58437d1739540f5d53c72ae4b
0f86916cd3fb90f2322423ecc55bae23
ABVGDE2JZIQKLMNOPRSTUFHC34WXY9678
f754f24ed984327b7a01975040c32221
f5ce302ff95caae389472601fcd518a7
c06c8400-8e06-11e0-9cb6-0002a5d5c51b
bb392ec0-8d4d-11e0-a896-0002a5d5c51b

信息 应用程序记录日志信息,不得记录敏感信息

应用程序记录日志信息,不得记录敏感信息
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#logs

Files:
org/telegram/DispatchQueuePriority.java, line(s) 29
org/telegram/PhoneFormat/PhoneFormat.java, line(s) 115
org/telegram/SQLite/SQLiteCursor.java, line(s) 98,103
org/telegram/SQLite/SQLiteDatabase.java, line(s) 61,78
org/telegram/SQLite/SQLitePreparedStatement.java, line(s) 104,112
org/telegram/db/DatabaseManager.java, line(s) 63,83
org/telegram/messenger/AndroidUtilities$16.java, line(s) 40,43
org/telegram/messenger/AndroidUtilities$LinkMovementMethodMy.java, line(s) 22
org/telegram/messenger/AndroidUtilities.java, line(s) 2073,2236,2262,2267,2939,371,455,538,722,755,1139,1164,1319,1332,1591,1617,1731,1743,1758,1783,1792,1940,1981,2033,2062,2132,2151,2168,2204,2232,2270,2279,2381,2386,2400,2411,2562,2584,2595,2646,2657,2740,2865,2900,3035,3057,3097,3193,3401,3413,3457,3484,3488,4432,4450,4657,4673,4782,4869,4877,5023,5032,5080,5197,5372,5470,5494,5605
org/telegram/messenger/AnimatedFileDrawableStream.java, line(s) 52,117
org/telegram/messenger/ApplicationLoader.java, line(s) 287,311,341,352,356,379,404,444,640,231,354,454,500,521,539,563,608,632
org/telegram/messenger/AuthTokensHelper.java, line(s) 71,63
org/telegram/messenger/BillingController.java, line(s) 211,262,339,351,378,143,358,406
org/telegram/messenger/BirthdayController.java, line(s) 76
org/telegram/messenger/ChatObject.java, line(s) 292,300,486,902,911,924,934,1019
org/telegram/messenger/ChatThemeController.java, line(s) 59,146,299,383
org/telegram/messenger/CodeHighlighting.java, line(s) 244,248,258,286,242,394,534
org/telegram/messenger/ContactsController.java, line(s) 390,402,413,633,720,729,753,867,872,894,951,1399,1526,117,126,502,527,680,1154,1162,1558,1624,2237,2269
org/telegram/messenger/ContactsRemoteViewsFactory.java, line(s) 158
org/telegram/messenger/ContactsSyncAdapterService.java, line(s) 49,30
org/telegram/messenger/DatabaseMigrationHelper.java, line(s) 545,598,644,668,692,716,763,978
org/telegram/messenger/DispatchQueue.java, line(s) 69,80,93,102,115
org/telegram/messenger/DispatchQueuePoolBackground.java, line(s) 122
org/telegram/messenger/DocumentObject.java, line(s) 104
org/telegram/messenger/DownloadController.java, line(s) 968,1044,1111,1152,1211,1253,1300,1305,1349
org/telegram/messenger/Emoji.java, line(s) 162,172,502,572,840,852
org/telegram/messenger/EmuInputDevicesDetector.java, line(s) 57
org/telegram/messenger/FactCheckController.java, line(s) 318,365,396
org/telegram/messenger/FeedRemoteViewsFactory.java, line(s) 139
org/telegram/messenger/FileLoadOperation.java, line(s) 860,906,1110,1121,1131,1275,1277,1327,1500,1502,1676,1732,1736,236,626,635,672,709,798,828,919,980,1053,1063,1073,1083,1094,1177,1183,1191,1197,1205,1211,1220,1230,1239,1545,1694,1698,1709,1725
org/telegram/messenger/FileLoader.java, line(s) 851,1905,125,1214,1720,1728,1736,1745
org/telegram/messenger/FileLog.java, line(s) 262,286,462,469,444
org/telegram/messenger/FilePathDatabase.java, line(s) 66,76,131,170,240,89,115,151,175,238,242,277,293,306,338,379,463,531,549
org/telegram/messenger/FileRefController.java, line(s) 113,128,735,970,1066
org/telegram/messenger/FileStreamLoadOperation.java, line(s) 116,117,138,148,212
org/telegram/messenger/FileUploadOperation.java, line(s) 120,150,290,222
org/telegram/messenger/FilesMigrationService.java, line(s) 115,153,158,184,189,345
org/telegram/messenger/FingerprintController.java, line(s) 31,46,75,80,93,118,133
org/telegram/messenger/GcmPushListenerService.java, line(s) 14,31
org/telegram/messenger/ImageLoader.java, line(s) 1365,1120,1462,1487,1560,1565,1574,2253,2265,2291,2339,2430,2436,2526,2623
org/telegram/messenger/ImportingService.java, line(s) 38,74
org/telegram/messenger/KeepAliveJob.java, line(s) 28,43,49,70,82
org/telegram/messenger/LanguageDetector.java, line(s) 39,45,51
org/telegram/messenger/LinkifyPort.java, line(s) 45
org/telegram/messenger/LiteMode.java, line(s) 139,152
org/telegram/messenger/LocaleController.java, line(s) 1100,1325,1356,1388,3326,3342,3352,3355,3390,3404,3459,3501,3540,3561,3570,3579,3590,3601,4337,928,938,1375,1387,1394,1404,1472,1519,1544,1741,1803,1884,2535,2641,2662,2687,2712,2734,2750,2766,2782,2818,2849,2871,2893,2909,2922,2951,3040,3146,3162,3185,3234,3244,3407,3462,4293,4313
org/telegram/messenger/LocationController.java, line(s) 304,383,715,775,860,928,1016,1022,1027,1032,1041,1053
org/telegram/messenger/LocationSharingService.java, line(s) 163
org/telegram/messenger/MediaController$13.java, line(s) 16
org/telegram/messenger/MediaController$14.java, line(s) 16
org/telegram/messenger/MediaController$2.java, line(s) 74,129
org/telegram/messenger/MediaController$5.java, line(s) 84
org/telegram/messenger/MediaController$6.java, line(s) 21
org/telegram/messenger/MediaController$7.java, line(s) 56
org/telegram/messenger/MediaController$8.java, line(s) 71
org/telegram/messenger/MediaController$9.java, line(s) 56
org/telegram/messenger/MediaController$MediaLoader.java, line(s) 140,212,243,314,322,330,359
org/telegram/messenger/MediaController$StopMediaObserverRunnable.java, line(s) 23,31
org/telegram/messenger/MediaController$VideoConvertRunnable.java, line(s) 30
org/telegram/messenger/MediaController.java, line(s) 407,842,953,997,1002,1012,1026,1038,1046,1053,2419,2550,2620,2627,2760,2799,2817,357,362,367,372,390,416,425,492,508,526,575,586,659,828,1313,1592,1606,1986,1992,2104,2161,2291,2331,2438,2447,2461,2521,2656,2667,2708,2746,2778,2820,2907,2910,2969,2977,2989,3066,3100,3110,3140,3344,3413,3419
org/telegram/messenger/MediaDataController.java, line(s) 5172,5486,511,601,855,1002,1057,1144,1308,1398,1531,1594,1655,2152,2185,2296,2351,2752,3008,3094,3610,3747,3909,4046,4263,5672,5715,5783,5854,5881,6041,6161,6394,6485,6502,6751,6879,7102,7629,7648,7667,8176,8227,8331,8562,8627,8690,8738,8773,9076,9160,9273,9450,9705,9883,10088
org/telegram/messenger/MessageObject.java, line(s) 817,1537,1733,1959,3710,7578
org/telegram/messenger/MessagePreviewParams.java, line(s) 389,397
org/telegram/messenger/MessagesController$1.java, line(s) 55,100
org/telegram/messenger/MessagesController$12.java, line(s) 60,105
org/telegram/messenger/MessagesController$PeerColor.java, line(s) 344
org/telegram/messenger/MessagesController$PeerColors.java, line(s) 161,203,235,256
org/telegram/messenger/MessagesController.java, line(s) 2976,3902,5066,5110,5115,5148,5160,5170,5193,5198,5205,5222,5234,6882,6891,7751,8445,8748,8997,9173,9216,9257,9263,9269,11127,11138,11268,11277,11294,11339,11348,11360,11721,11722,11781,1845,1861,1888,2589,2784,4001,6362,8767,9108,9200,9452,9935,9990,10032,10052,10540,11413,11915,12020,12099,12619,13366,13876,14014,15256
org/telegram/messenger/MessagesStorage.java, line(s) 386,392,714,719,418,426,436,443,500,510,518,742,858,868,871,874,886,889,893,3323,5832,7226
org/telegram/messenger/MusicBrowserService.java, line(s) 211,297,346
org/telegram/messenger/MusicPlayerService.java, line(s) 207,273,638
org/telegram/messenger/NativeLoader.java, line(s) 34,48
org/telegram/messenger/NotificationBadge.java, line(s) 202,489
org/telegram/messenger/NotificationCenter.java, line(s) 721
org/telegram/messenger/NotificationDismissReceiver.java, line(s) 27,31
org/telegram/messenger/NotificationImageProvider.java, line(s) 113
org/telegram/messenger/NotificationsController.java, line(s) 273,451,507,1139,1563,1673,1773,1841,1856,1914,1940,1999,2171,248,253,260,284,307,328,425,448,456,1461,1513,1530,1610,1692,1709,1724,1752,1756,1765,1780,1838,1853,1862,1911,1937,1959,2007,2079,2265,2275,2281,2577,2612,2616,2625,2260
org/telegram/messenger/NotificationsDisabledReceiver.java, line(s) 29,33,44,53,62,71,85
org/telegram/messenger/NotificationsService.java, line(s) 30
org/telegram/messenger/OpenAttachedMenuBotReceiver.java, line(s) 33
org/telegram/messenger/OpenChatReceiver.java, line(s) 34
org/telegram/messenger/PlusUtils.java, line(s) 536,538,541,1124,1323,1416,1443,1572,2893,3521,4091
org/telegram/messenger/PushListenerController.java, line(s) 95,104,110,114,256,259,278,270,297
org/telegram/messenger/SavedMessagesController.java, line(s) 995
org/telegram/messenger/ScreenReceiver.java, line(s) 13,19
org/telegram/messenger/SecretChatHelper.java, line(s) 644,719,742,828,1023,1156,1406,1435,1479,1496
org/telegram/messenger/SendMessagesHelper$LocationProvider.java, line(s) 44,90,95,104
org/telegram/messenger/SendMessagesHelper.java, line(s) 2788,2794,2822,2832,2846,2860,2874,3767,4945,773,790,1368,2135,4045,4048,4053,4106,4158,4235,4428,4753
org/telegram/messenger/SharedConfig.java, line(s) 1502,454,483,550,569,615,629,672,686,881,1232,1373
org/telegram/messenger/SmsReceiver.java, line(s) 47
org/telegram/messenger/SvgHelper.java, line(s) 456,469,491,504,517,530,545,559,575,1648
org/telegram/messenger/Timer.java, line(s) 77
org/telegram/messenger/TopicsController.java, line(s) 91,117,144,1075
org/telegram/messenger/TranslateController.java, line(s) 903,1031,383,388,393,412,586,1280,1322
org/telegram/messenger/UserConfig.java, line(s) 248
org/telegram/messenger/UserNameResolver.java, line(s) 35
org/telegram/messenger/Utilities.java, line(s) 160,352,368,397,410,421,433,452,469,504,521,847,986,1001,1027,846
org/telegram/messenger/VideoEditedInfo.java, line(s) 715
org/telegram/messenger/VideoEncodingService.java, line(s) 66,28,113,137
org/telegram/messenger/XiaomiUtilities.java, line(s) 43
org/telegram/messenger/audioinfo/OtherAudioInfo.java, line(s) 45,53
org/telegram/messenger/browser/Browser.java, line(s) 102,117,396,472,601,609
org/telegram/messenger/camera/Camera2Session.java, line(s) 219,226,141,197,232,256,267,284,340,387,456,492,581,609
org/telegram/messenger/camera/CameraController.java, line(s) 183,219,612,629,662,194,236,277,369,384,389,513,561,602,669,698,774,787,811,840,843,910,915,926,931,939,965
org/telegram/messenger/camera/CameraSession.java, line(s) 219,223,153,212,268,286,344,357,374,379,471
org/telegram/messenger/camera/CameraView.java, line(s) 800,1420,2111,2178,2256,2319,2463,2535,2721,2759,2772,2780,2784,2790,2833,2911,3137,1428,1436,1445,1462,1473,1480,1498,1530,1580,1589,1604,1614,1621,1789,1814,1824,1990,2436,2809,2865,2879,3030,3039,3049,3065,3070,3071,3167,3172,3173,3201,3246,3311,3319,3364,3369,3377
org/telegram/messenger/ringtone/RingtoneDataStore.java, line(s) 48,366
org/telegram/messenger/secretmedia/ExtendedDefaultDataSource.java, line(s) 195
org/telegram/messenger/support/JobIntentService.java, line(s) 142
org/telegram/messenger/support/customtabsclient/shared/CustomTabsHelper.java, line(s) 70
org/telegram/messenger/support/fingerprint/FingerprintManagerCompatApi23.java, line(s) 22,37
org/telegram/messenger/utils/BillingUtilities.java, line(s) 48,53,63,72,77,82,87,94,97,100,109,116,171,187,197,37,119,182,193
org/telegram/messenger/utils/CopyUtilities.java, line(s) 105
org/telegram/messenger/video/AudioDecoder.java, line(s) 61,96,105,114,123,127,137,141,163,167
org/telegram/messenger/video/AudioRecoder.java, line(s) 70
org/telegram/messenger/video/MediaCodecVideoConvertor.java, line(s) 233,81
org/telegram/messenger/video/OutputSurface.java, line(s) 113
org/telegram/messenger/video/TextureRenderer.java, line(s) 222,996
org/telegram/messenger/video/VideoFramesRewinder.java, line(s) 145,188,190,209,221,243,253,268
org/telegram/messenger/video/VideoPlayerHolderBase.java, line(s) 157,184,190,221,618,336
org/telegram/messenger/voip/AudioRecordJNI.java, line(s) 242,62,75,91,109,133,175,207,233,105,215,59,72,88
org/telegram/messenger/voip/AudioTrackJNI.java, line(s) 37,60,114,124,122,31
org/telegram/messenger/voip/Instance.java, line(s) 98
org/telegram/messenger/voip/NativeInstance.java, line(s) 142,276,306
org/telegram/messenger/voip/TelegramConnectionService.java, line(s) 32,70,49,59,16,24
org/telegram/messenger/voip/VideoCapturerDevice.java, line(s) 275
org/telegram/messenger/voip/VoIPPreNotificationService.java, line(s) 143,146,273,276,308,311,354,359,118,190,235,291,332,345,177,225
org/telegram/messenger/voip/VoIPServerConfig.java, line(s) 19
org/telegram/messenger/voip/VoIPService.java, line(s) 1297,1769,2033,2154,3139,3155,3175,3269,3507,3920,3936,3973,3980,3987,4103,4117,4289,4331,4476,4521,4528,4536,4691,4750,4909,5128,5139,5174,5186,5193,318,361,369,558,822,886,926,993,1215,1269,1283,1295,1326,1363,1815,2067,3074,3302,3467,3500,3542,3622,3677,3750,3767,3829,3891,3911,3993,4162,4174,4255,4355,4364,4410,4444,4486,4703,4714,4744,892,920,1312,1319,1359,1836,3818
org/telegram/plus/FirebaseHelper.java, line(s) 210,525,534
org/telegram/plus/MonetHelper.java, line(s) 98
org/telegram/plus/QrHelper.java, line(s) 18
org/telegram/tgnet/ConnectionsManager$FirebaseTask.java, line(s) 22
org/telegram/tgnet/ConnectionsManager$GoogleDnsLoadTask.java, line(s) 42,50,51,55
org/telegram/tgnet/ConnectionsManager$MozillaDnsLoadTask.java, line(s) 42,48
org/telegram/tgnet/ConnectionsManager$ResolveHostByNameTask.java, line(s) 61,77,87,92,107,114
org/telegram/tgnet/ConnectionsManager.java, line(s) 384,453,463,465,604,680,688,704,720,723,730,790,818,821,829,833,839,843,848,852,980,986,989,1079,1083,1095,406,435,468,733,799,881,893,914,995,1035,1091,1099,1104,426
org/telegram/tgnet/NativeByteBuffer.java, line(s) 135,136,151,152,167,168,193,194,208,209,228,229,238,239,247,248,283,284,320,321,332,333,370,417,418,434,435,451,452,470,486,487,500,501,514,515,524,559,560,590,591,627,628,644,645
org/telegram/tgnet/SerializedData.java, line(s) 73,82,91,100,131,132,155,156,184,185,199,200,214,215,230,231,267,268,279,280,291,292,303,304,333,351,352,386,387,421,422,438,439,455,456,473,474,494,495
org/telegram/tgnet/TLClassStore.java, line(s) 51
org/telegram/tgnet/TLRPC.java, line(s) 4156,4258,25138,25354,25571,25788,25998,26206,26406,26600,37731,37846
org/telegram/ui/ActionBar/ActionBarLayout.java, line(s) 1479,495,1295,1299,2087,2914
org/telegram/ui/ActionBar/ActionBarPopupWindow.java, line(s) 193,581,681
org/telegram/ui/ActionBar/AlertDialog.java, line(s) 393,1354
org/telegram/ui/ActionBar/BaseFragment.java, line(s) 343,355,391,409,564,684,696,785,848
org/telegram/ui/ActionBar/BottomSheet.java, line(s) 1031,1377,1795,1857,1894,1972
org/telegram/ui/ActionBar/BottomSheetTabDialog.java, line(s) 169,180
org/telegram/ui/ActionBar/BottomSheetTabs.java, line(s) 939
org/telegram/ui/ActionBar/DrawerLayoutContainer.java, line(s) 507
org/telegram/ui/ActionBar/EmojiThemes.java, line(s) 318,461,534,605
org/telegram/ui/ActionBar/PlusSettings.java, line(s) 518,745,749,770
org/telegram/ui/ActionBar/Theme.java, line(s) 5843,5898,3144,3160,3224,3363,3411,3631,3639,3987,5173,5180,5234,5335,5358,5417,5449,5468,5492,6292,6313,6327,9451,9492,9690,9713,9747,6145
org/telegram/ui/ActionBar/ThemeDescription.java, line(s) 795
org/telegram/ui/ActionIntroActivity.java, line(s) 730
org/telegram/ui/Adapters/ContactsAdapter.java, line(s) 132
org/telegram/ui/Adapters/DialogsAdapter.java, line(s) 492
org/telegram/ui/Adapters/DialogsSearchAdapter.java, line(s) 904,951,1000,1026
org/telegram/ui/Adapters/DrawerLayoutAdapter.java, line(s) 242
org/telegram/ui/Adapters/SearchAdapter.java, line(s) 114,135
org/telegram/ui/Adapters/SearchAdapterHelper.java, line(s) 360,546,604
org/telegram/ui/ArticleViewer.java, line(s) 1499,5181,5267,5592,5653,5676,5817,5827,5849,5862,8089,8100,8206,8248,8282,8328,10926,11266,12761,12766
org/telegram/ui/BasePermissionsActivity.java, line(s) 102
org/telegram/ui/BubbleActivity.java, line(s) 295,299,89
org/telegram/ui/Business/BusinessLinksController.java, line(s) 135,225,283
org/telegram/ui/Business/BusinessRecipientsHelper.java, line(s) 159,184,195,221,247,259
org/telegram/ui/Business/LocationActivity.java, line(s) 667
org/telegram/ui/Business/QuickRepliesController.java, line(s) 297,340,513,733,885
org/telegram/ui/CacheControlActivity.java, line(s) 300,446,556,563,870,1385,1472,1522,1543
org/telegram/ui/CachedMediaLayout.java, line(s) 925
org/telegram/ui/CameraScanActivity.java, line(s) 800,811,1042
org/telegram/ui/CategoriesActivity.java, line(s) 421
org/telegram/ui/Cells/AboutLinkCell.java, line(s) 243,310,550
org/telegram/ui/Cells/AudioPlayerCell.java, line(s) 86,97
org/telegram/ui/Cells/BaseCell.java, line(s) 260
org/telegram/ui/Cells/BotHelpCell.java, line(s) 214
org/telegram/ui/Cells/ChannelRecommendationsCell.java, line(s) 566,587
org/telegram/ui/Cells/ChatActionCell.java, line(s) 596,895,900
org/telegram/ui/Cells/ChatMessageCell.java, line(s) 2304,2313,2422,2432,5819,5901,5970,6019
org/telegram/ui/Cells/DialogCell.java, line(s) 957,1090,2225
org/telegram/ui/Cells/DialogMeUrlCell.java, line(s) 210,225,329
org/telegram/ui/Cells/DrawerActionCell.java, line(s) 104,113,154
org/telegram/ui/Cells/DrawerProfileCell.java, line(s) 635
org/telegram/ui/Cells/ProfileChannelCell.java, line(s) 286
org/telegram/ui/Cells/SettingsSuggestionCell.java, line(s) 136
org/telegram/ui/Cells/TextSelectionHelper.java, line(s) 1465
org/telegram/ui/Cells/ThemesHorizontalListCell.java, line(s) 340
org/telegram/ui/ChangeBioActivity.java, line(s) 253,264
org/telegram/ui/ChangeUsernameActivity.java, line(s) 133,1439,1453,1462,1471
org/telegram/ui/ChannelAdminLogActivity.java, line(s) 1601,1627,517,581,788,2454,3583,3592,3601,3610,3619,3628,516,516,520,580,584
org/telegram/ui/ChannelColorActivity.java, line(s) 750,2268
org/telegram/ui/ChannelCreateActivity.java, line(s) 1152,1298,1312
org/telegram/ui/ChannelMonetizationLayout.java, line(s) 2337
org/telegram/ui/ChatActivity.java, line(s) 5574,5605,5633,16184,16519,23721,25613,25635,25657,25679,25703,25732,25758,25791,3602,3727,3841,5750,6497,11581,12188,12392,12493,12858,12863,12876,12931,12937,14722,15352,15454,15773,18480,19436,19612,20464,21568,21720,21755,21778,21794,22141,24143,24614,24675,25629,25651,25673,25695,25726,25748,25785,25807,27617,27978,28875,29041,29060,29094,32267,32318
org/telegram/ui/ChatEditActivity.java, line(s) 1047
org/telegram/ui/ChatRightsEditActivity.java, line(s) 1069,1096
org/telegram/ui/ChatUsersActivity.java, line(s) 2710
org/telegram/ui/Components/AlertsCreator.java, line(s) 222,252,303,335,945,998,1013,1939,3265,3285,3294,4948,5004,6181
org/telegram/ui/Components/AnimatedEmojiDrawable.java, line(s) 252,288
org/telegram/ui/Components/AppLinkVerifyBottomSheet.java, line(s) 148
org/telegram/ui/Components/AvatarDrawable.java, line(s) 717
org/telegram/ui/Components/BlurBehindDrawable.java, line(s) 146,408
org/telegram/ui/Components/Categories.java, line(s) 402
org/telegram/ui/Components/ChatActivityEnterView.java, line(s) 3396,2569,4484,4559,5551,8572,8601,8782,8800,8812,8866,9483,9498,9780,9828
org/telegram/ui/Components/ChatAttachAlert.java, line(s) 3123,5749
org/telegram/ui/Components/ChatAttachAlertAudioLayout.java, line(s) 590
org/telegram/ui/Components/ChatAttachAlertDocumentLayout.java, line(s) 193,702,967,974
org/telegram/ui/Components/ChatAttachAlertLocationLayout.java, line(s) 576,649,670,878,911,949,1010,1460,1486,1506,1515
org/telegram/ui/Components/ChatAttachAlertPhotoLayout.java, line(s) 3644,4058,4069
org/telegram/ui/Components/ChatAttachAlertPollLayout.java, line(s) 1368,1397
org/telegram/ui/Components/ChatAvatarContainer.java, line(s) 868
org/telegram/ui/Components/ChatDialogsView.java, line(s) 171,187,475
org/telegram/ui/Components/ChatThemeBottomSheet.java, line(s) 1306,1492,1657
org/telegram/ui/Components/ClippingImageView.java, line(s) 240
org/telegram/ui/Components/ColorSelectorDialog.java, line(s) 110
org/telegram/ui/Components/Crop/CropView.java, line(s) 1297,1100,1238
org/telegram/ui/Components/DeleteMessagesBottomSheet.java, line(s) 1273,1301
org/telegram/ui/Components/DialogsBotsAdapter.java, line(s) 548
org/telegram/ui/Components/DrawingInBackgroundThreadDrawable.java, line(s) 47
org/telegram/ui/Components/EarListener.java, line(s) 61,140,251,289,294,357
org/telegram/ui/Components/EditTextBoldCursor.java, line(s) 407,699,980,1069,1078
org/telegram/ui/Components/EditTextCaption.java, line(s) 282,368,501,827,854,886,963
org/telegram/ui/Components/EditTextEmoji.java, line(s) 220,1119,1149
org/telegram/ui/Components/EmbedBottomSheet.java, line(s) 234,356,386,402,427,486,570,577,773,793,806,887,952,978,1050
org/telegram/ui/Components/EmojiColorPickerWindow.java, line(s) 434
org/telegram/ui/Components/EmojiPacksAlert.java, line(s) 947,1455,1852
org/telegram/ui/Components/EmojiView.java, line(s) 1460,1945,2358,6414,7855
org/telegram/ui/Components/FilterGLThread.java, line(s) 230,237,246,259,274,281,345,365,477,627
org/telegram/ui/Components/FilterShaders.java, line(s) 1039,1040
org/telegram/ui/Components/ForegroundDetector.java, line(s) 75,108,83,116
org/telegram/ui/Components/GroupCallPipAlertView.java, line(s) 215
org/telegram/ui/Components/GroupVoipInviteAlert.java, line(s) 375
org/telegram/ui/Components/ImageUpdater.java, line(s) 694,731,776,1052,1059
org/telegram/ui/Components/InstantCameraView.java, line(s) 828,882,889,1371,1461,1686,1692,2078,2103,2451,2545,2731,2738,2791,2818,3127,719,819,1068,1187,1520,1533,1574,1586,1700,1707,1716,1727,1738,1745,1780,1808,1813,1822,1922,2188,2196,2204,2219,2227,2520,2548,2570,2676,2741,2750,2761,2788,2797,2798,2802,2807,2808,3061,3072,3168,3222
org/telegram/ui/Components/JoinCallAlert.java, line(s) 232,289
org/telegram/ui/Components/LetterDrawable.java, line(s) 106
org/telegram/ui/Components/LinkActionView.java, line(s) 223,256
org/telegram/ui/Components/MentionsContainerView.java, line(s) 740
org/telegram/ui/Components/MessagePreviewView.java, line(s) 424
org/telegram/ui/Components/MotionBackgroundDrawable.java, line(s) 329,549
org/telegram/ui/Components/Paint/RenderView.java, line(s) 424,431,440,453,469,476,496,678
org/telegram/ui/Components/Paint/Shader.java, line(s) 19,27,82,92
org/telegram/ui/Components/Paint/ShapeDetector.java, line(s) 220,282,616
org/telegram/ui/Components/Paint/Slice.java, line(s) 26,56,90
org/telegram/ui/Components/Paint/Texture.java, line(s) 56
org/telegram/ui/Components/Paint/Views/LPhotoPaintView.java, line(s) 1823,1888,2073,2080,2098,3882,3917
org/telegram/ui/Components/Paint/Views/PhotoView.java, line(s) 178
org/telegram/ui/Components/Paint/Views/StickerMakerView.java, line(s) 1099,1103,939,1080,1942,1952
org/telegram/ui/Components/PasscodeView.java, line(s) 203,336,1352,1372
org/telegram/ui/Components/PathAnimator.java, line(s) 88
org/telegram/ui/Components/PermissionRequest.java, line(s) 81,206
org/telegram/ui/Components/PhonebookShareAlert.java, line(s) 303,361,699
org/telegram/ui/Components/PhotoViewerWebView.java, line(s) 427,604,733
org/telegram/ui/Components/PipRoundVideoView.java, line(s) 288
org/telegram/ui/Components/PlusPagerSlidingTabStrip.java, line(s) 228
org/telegram/ui/Components/Premium/GLIcon/GLIconTextureView.java, line(s) 369,374,425,432,475
org/telegram/ui/Components/Premium/PremiumAppIconsPreviewView.java, line(s) 42
org/telegram/ui/Components/Premium/PremiumFeatureBottomSheet.java, line(s) 350
org/telegram/ui/Components/Premium/PremiumNotAvailableBottomSheet.java, line(s) 68
org/telegram/ui/Components/Premium/boosts/ReassignBoostBottomSheet.java, line(s) 409,430
org/telegram/ui/Components/Premium/boosts/cells/msg/GiveawayResultsMessageCell.java, line(s) 179
org/telegram/ui/Components/ProximitySheet.java, line(s) 574
org/telegram/ui/Components/QRCodeBottomSheet.java, line(s) 167
org/telegram/ui/Components/RLottieDrawable.java, line(s) 396,510,1120
org/telegram/ui/Components/RadioButton.java, line(s) 50,167
org/telegram/ui/Components/Reactions/ChatCustomReactionsEditActivity.java, line(s) 308,781
org/telegram/ui/Components/RecyclerListView.java, line(s) 982,1256,1273,2315,2321
org/telegram/ui/Components/SearchDownloadsContainer.java, line(s) 724
org/telegram/ui/Components/SeekBar.java, line(s) 362,372
org/telegram/ui/Components/SeekBarView.java, line(s) 539
org/telegram/ui/Components/ShareAlert.java, line(s) 3127,4259
org/telegram/ui/Components/SharedMediaLayout.java, line(s) 2879,3448,5915
org/telegram/ui/Components/SizeNotifierFrameLayout.java, line(s) 628,567
org/telegram/ui/Components/SlotsDrawable.java, line(s) 71,184
org/telegram/ui/Components/StaticLayoutEx.java, line(s) 103,181
org/telegram/ui/Components/StickerCategoriesListView.java, line(s) 942
org/telegram/ui/Components/StickersAlert.java, line(s) 440,473,1568,1730,1955
org/telegram/ui/Components/TabsView.java, line(s) 213
org/telegram/ui/Components/TermsOfServiceView.java, line(s) 171
org/telegram/ui/Components/ThanosEffect.java, line(s) 464,467,479,482,410,529,534,540,549,556,561,568,581,594,602,616,1118,1125,1132,1149
org/telegram/ui/Components/ThemeEditorView.java, line(s) 105,114,1101,1120,1434,1706,1827
org/telegram/ui/Components/TimerDrawable.java, line(s) 125
org/telegram/ui/Components/TranscribeButton.java, line(s) 726,817
org/telegram/ui/Components/UndoView.java, line(s) 128
org/telegram/ui/Components/VideoPlayer.java, line(s) 1592,1615,1618,1092,1126,1258,1277,1470,2231,2232
org/telegram/ui/Components/VideoPlayerSeekBar.java, line(s) 343
org/telegram/ui/Components/VideoSeekPreviewImage.java, line(s) 347,353
org/telegram/ui/Components/VideoTimelinePlayView.java, line(s) 380,443,495
org/telegram/ui/Components/VideoTimelineView.java, line(s) 278,348,389
org/telegram/ui/Components/WallpaperUpdater.java, line(s) 107,110,149,175
org/telegram/ui/Components/WebPlayerView.java, line(s) 459,382,439,514,574,627,692,748,1107,1387,1435,1794,1802,1810,1818,1826,1832,1856
org/telegram/ui/Components/spoilers/SpoilerEffect2.java, line(s) 468,477,494,568,577,588,593,598,604,650
org/telegram/ui/Components/voip/VoIPHelper.java, line(s) 92,141,315,770
org/telegram/ui/Components/voip/VoIPPiPView.java, line(s) 373,636
org/telegram/ui/ContactAddActivity.java, line(s) 313
org/telegram/ui/ContactsActivity.java, line(s) 840,1049,1338,1413,1590,1620
org/telegram/ui/ContentPreviewViewer.java, line(s) 1105,1256,1353,1551
org/telegram/ui/ConvertThemesActivity.java, line(s) 351,374,396,403,286
org/telegram/ui/CountrySelectActivity.java, line(s) 304,441,452
org/telegram/ui/DialogsActivity.java, line(s) 4183,7309,7320,8337,10089,11266,11418,13397,13417
org/telegram/ui/DocumentSelectActivity.java, line(s) 188,782,1016
org/telegram/ui/EmojiAnimationsOverlay.java, line(s) 959
org/telegram/ui/ExternalActionActivity.java, line(s) 662,666,106,423,469
org/telegram/ui/FilterChatlistActivity.java, line(s) 1484
org/telegram/ui/FilterCreateActivity.java, line(s) 894,1346,1461
org/telegram/ui/FilteredSearchView.java, line(s) 1158
org/telegram/ui/FiltersSetupActivity.java, line(s) 610,1090
org/telegram/ui/GroupCallActivity.java, line(s) 452,470,1172,1319
org/telegram/ui/GroupCreateActivity.java, line(s) 903
org/telegram/ui/GroupCreateFinalActivity.java, line(s) 195
org/telegram/ui/GroupInviteActivity.java, line(s) 135,150
org/telegram/ui/GroupStickersActivity.java, line(s) 828
org/telegram/ui/IdenticonActivity.java, line(s) 65
org/telegram/ui/IntroActivity.java, line(s) 690,697,711,723,734,741,793
org/telegram/ui/InviteContactsActivity.java, line(s) 644,687,856,882
org/telegram/ui/LanguageSelectActivity.java, line(s) 224
org/telegram/ui/LaunchActivity.java, line(s) 755,1316,1328,2364,5333,6192,6221,6309,6322,6331,6341,6345,6366,6378,725,771,1056,1058,1086,1222,1224,2242,2286,2623,2879,3057,3063,3104,3141,3202,3210,3235,3343,3431,3469,3492,3498,3508,3827,3853,3961,4032,4122,4139,4156,4177,4205,4273,4299,4330,4339,4371,4668,5060,5078,5200,5559,5568,5577,5935,6251,6328,6541,6632,2400,2406
org/telegram/ui/LocationActivity.java, line(s) 450,458,589,1332,1765,1875,1882,1987,2228,2261,2317,2360,2389,2415,2544,2619,2973,3003,3026,3129,3237,3308,3322,3345,3354,3620
org/telegram/ui/LoginActivity.java, line(s) 1540,1640,1663,1759,1788,1819,1822,1825,1831,1836,1840,1857,1864,3153,3305,641,744,1466,1794,1830,1862,2437,2456,3244,3353,3382,3506,3761,4020,4444,4541,6024,6366,6377,8725,9452,10121,10166,10181
org/telegram/ui/ManageLinksActivity.java, line(s) 1112,1143
org/telegram/ui/MessageSendPreview.java, line(s) 1284,1308,1331,1876
org/telegram/ui/NewContactBottomSheet.java, line(s) 318
org/telegram/ui/NotificationsSettingsActivity.java, line(s) 469
org/telegram/ui/NotificationsSoundActivity.java, line(s) 528,924
org/telegram/ui/PasscodeActivity.java, line(s) 630,795,924
org/telegram/ui/PassportActivity.java, line(s) 777,2034,2371,2663,2768,3527,5137,5555,5615,5818,6745,6881
org/telegram/ui/PaymentFormActivity.java, line(s) 290,495,579,898,1297,1511,1698,1705,2002,2045,2315
org/telegram/ui/PhotoCropActivity.java, line(s) 193,198
org/telegram/ui/PhotoViewer.java, line(s) 9185,9193,15760,2047,3426,3434,3543,6481,6506,6578,6603,7409,7760,8357,8697,8752,9499,9582,9589,10042,10065,10418,10533,10546,10561,10590,10839,10849,10915,10924,11084,12137,12216,12694,13792,14183,14194,14203,14391,14514,15996
org/telegram/ui/PlusChatsStatsActivity.java, line(s) 428,460
org/telegram/ui/PlusManageTabsActivity.java, line(s) 197,215,235,524,538
org/telegram/ui/PlusMessageInfo.java, line(s) 482,494
org/telegram/ui/PlusSettingsActivity.java, line(s) 1975,1991,2089
org/telegram/ui/PlusSettingsMainActivity.java, line(s) 629,633
org/telegram/ui/PollCreateActivity.java, line(s) 1228,1255
org/telegram/ui/PopupNotificationActivity.java, line(s) 511,1328
org/telegram/ui/PremiumPreviewFragment.java, line(s) 2285,2299,2313,2339
org/telegram/ui/PrivacyControlActivity.java, line(s) 1384
org/telegram/ui/PrivacySettingsActivity.java, line(s) 582,685
org/telegram/ui/ProfileActivity.java, line(s) 4447,4449,1304,2001,4452,5222,6252,6267,6299,6599,6612,6627,6713,6733,6747,6811,6817,8485,9733,9910,13428,4869
org/telegram/ui/ProfileBirthdayEffect.java, line(s) 278,315
org/telegram/ui/ProfileNotificationsActivity.java, line(s) 289
org/telegram/ui/RestrictedLanguagesSelectActivity.java, line(s) 531,543,566
org/telegram/ui/SecretMediaViewer.java, line(s) 643,649,692,785,1187,1580,1802,1927
org/telegram/ui/SelectAnimatedEmojiDialog.java, line(s) 3256
org/telegram/ui/SessionsActivity.java, line(s) 507,533,1396,1491
org/telegram/ui/ShareActivity.java, line(s) 78,101
org/telegram/ui/Stars/BotStarsActivity.java, line(s) 990
org/telegram/ui/Stars/StarsController.java, line(s) 2998
org/telegram/ui/Stars/StarsIntroActivity.java, line(s) 399
org/telegram/ui/StickersActivity.java, line(s) 1063,1089,1489
org/telegram/ui/Stories/PeerStoriesView.java, line(s) 1045,1048
org/telegram/ui/Stories/SelfStoryViewsPage.java, line(s) 1080,1114,1135,1181,1203,1272
org/telegram/ui/Stories/SelfStoryViewsView.java, line(s) 84
org/telegram/ui/Stories/StoriesController.java, line(s) 487,537,833,896,921,943,957,966,970,974,979,999,1003,1007,1013,1080,1088,1090,1110,1119,1167,1187,1220,1413,1452,2061,2665,2681,3443,3728,3766,3823,3875,3890,3897,3905,206,2140
org/telegram/ui/Stories/StoriesStorage.java, line(s) 193,80,95,118,127,148,222,248,270,273,295
org/telegram/ui/Stories/StoriesViewPager.java, line(s) 378
org/telegram/ui/Stories/StoryCaptionView.java, line(s) 169,177
org/telegram/ui/Stories/StoryViewer.java, line(s) 1169,1232,1239,1244,1256,2818,2826,1530,1855,2558
org/telegram/ui/Stories/recorder/CaptionContainerView.java, line(s) 679,1211
org/telegram/ui/Stories/recorder/DownloadButton.java, line(s) 128
org/telegram/ui/Stories/recorder/DraftsController.java, line(s) 285,447,159,209,302,474
org/telegram/ui/Stories/recorder/DualCameraView.java, line(s) 150,654
org/telegram/ui/Stories/recorder/EmojiBottomSheet.java, line(s) 1617,1674,3223
org/telegram/ui/Stories/recorder/PaintView.java, line(s) 2725,2732,2750,3757,4083,4930,4964
org/telegram/ui/Stories/recorder/ScannedLinkPreview.java, line(s) 347
org/telegram/ui/Stories/recorder/StoryEntry.java, line(s) 1087,273,382,399,404,484,1382
org/telegram/ui/Stories/recorder/StoryLinkSheet.java, line(s) 227
org/telegram/ui/Stories/recorder/StoryPrivacySelector.java, line(s) 140
org/telegram/ui/Stories/recorder/StoryRecorder.java, line(s) 3704,3718,4018,4025,4201,6125,6134,6165,6180,6184,6774,6942,6952,6962
org/telegram/ui/Stories/recorder/StoryUploadingService.java, line(s) 43,94,61,115
org/telegram/ui/Stories/recorder/TimelineView.java, line(s) 1853,1889,1950,2111
org/telegram/ui/Stories/recorder/Weather.java, line(s) 310,327
org/telegram/ui/ThemeActivity.java, line(s) 1499,1702,1714,1810,1815
org/telegram/ui/ThemePreviewActivity.java, line(s) 1784
org/telegram/ui/ThemeSetUrlActivity.java, line(s) 114,132,471,487,718,729
org/telegram/ui/ThemingActivity.java, line(s) 139,417,470,634,649
org/telegram/ui/ThemingChatActivity.java, line(s) 222,1382,1397
org/telegram/ui/ThemingChatsActivity.java, line(s) 201,1244,1259
org/telegram/ui/ThemingContactsActivity.java, line(s) 116,472,487
org/telegram/ui/ThemingDrawerActivity.java, line(s) 150,605,620
org/telegram/ui/ThemingProfileActivity.java, line(s) 124,538,553
org/telegram/ui/ThemingSettingsActivity.java, line(s) 110,391,406
org/telegram/ui/TopicsFragment.java, line(s) 3795,1408,2320
org/telegram/ui/TwoStepVerificationActivity.java, line(s) 167,744
org/telegram/ui/TwoStepVerificationSetupActivity.java, line(s) 1130,1582,1606
org/telegram/ui/VoIPFragment.java, line(s) 1199,1800,2013
org/telegram/ui/VoIPPermissionActivity.java, line(s) 40
org/telegram/ui/WallpapersListActivity.java, line(s) 1278
org/telegram/ui/WebviewActivity.java, line(s) 104,157,260,270,425
org/telegram/ui/bots/BotBiometry.java, line(s) 210,220,230,113,153,197,249,280,290,409
org/telegram/ui/bots/BotDownloads.java, line(s) 97,245,324
org/telegram/ui/bots/BotLocation.java, line(s) 133,302,398,412,443,465,479
org/telegram/ui/bots/BotWebViewSheet.java, line(s) 1545,1591,2522
org/telegram/ui/bots/WebViewRequestProps.java, line(s) 51
org/telegram/ui/web/AddressBarList.java, line(s) 317,392,396,734,739,822,826,996,1012
org/telegram/ui/web/BotWebViewContainer.java, line(s) 732,1987,2338,4016,365,429,496,718,738,1307,1318,1329,1396,1438,1462,1485,1496,1509,1572,1582,1635,1845,1937,1959,1997,2009,2261,2288,2429,2442,2447,2463,2494,3563,3585
org/telegram/ui/web/BrowserHistory.java, line(s) 87,199,202,215
org/telegram/ui/web/RestrictedDomainsList.java, line(s) 43,58,150,166
org/telegram/ui/web/SearchEngine.java, line(s) 49,56,66
org/telegram/ui/web/WebBrowserSettings.java, line(s) 411,419,437
org/telegram/ui/web/WebInstantView.java, line(s) 119,253,373,402,485,506,562
org/telegram/ui/web/WebMetadataCache.java, line(s) 132,234,300,314,423
org/webrtc/AndroidVideoDecoder.java, line(s) 449
org/webrtc/EglRenderer.java, line(s) 212,550
org/webrtc/GlGenericDrawer.java, line(s) 326
org/webrtc/GlShader.java, line(s) 97
org/webrtc/HardwareVideoEncoderFactory.java, line(s) 125
org/webrtc/MediaCodecUtils.java, line(s) 55
org/webrtc/ScreenCapturerAndroid.java, line(s) 85,149
org/webrtc/TextureBufferImpl.java, line(s) 120
org/webrtc/YuvConverter.java, line(s) 116,142
org/webrtc/voiceengine/WebRtcAudioRecord.java, line(s) 173,373,414
org/webrtc/voiceengine/WebRtcAudioTrack.java, line(s) 162,296,426

信息 此应用程序将数据复制到剪贴板。敏感数据不应复制到剪贴板,因为其他应用程序可以访问它

此应用程序将数据复制到剪贴板。敏感数据不应复制到剪贴板,因为其他应用程序可以访问它
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x04b-Mobile-App-Security-Testing.md#clipboard

Files:
org/telegram/messenger/AndroidUtilities.java, line(s) 9,3029,3032
org/telegram/messenger/PlusUtils.java, line(s) 6,1093
org/telegram/messenger/translator/TranslateBottomSheet.java, line(s) 5,170
org/telegram/ui/ChangeUsernameActivity.java, line(s) 7,127
org/telegram/ui/ChatActivity.java, line(s) 12,21562,21751,21763,21771,21787
org/telegram/ui/Components/EmbedBottomSheet.java, line(s) 9,950
org/telegram/ui/Components/InviteMembersBottomSheet.java, line(s) 11,1192
org/telegram/ui/Components/LinkActionView.java, line(s) 6,214
org/telegram/ui/Components/PhonebookShareAlert.java, line(s) 8,356,378
org/telegram/ui/Components/ShareAlert.java, line(s) 10,3107
org/telegram/ui/Components/ThemeEditorView.java, line(s) 9,1092
org/telegram/ui/GroupInviteActivity.java, line(s) 4,128
org/telegram/ui/ManageLinksActivity.java, line(s) 4,1106
org/telegram/ui/PlusMessageInfo.java, line(s) 4,491
org/telegram/ui/PlusSettingsActivity.java, line(s) 6,1964,2079
org/telegram/ui/PlusSettingsMainActivity.java, line(s) 6,654
org/telegram/ui/ProfileActivity.java, line(s) 14,6258,6605
org/telegram/ui/SessionBottomSheet.java, line(s) 5,301
org/telegram/ui/StickersActivity.java, line(s) 4,1083
org/telegram/ui/ThemeSetUrlActivity.java, line(s) 4,108
org/telegram/ui/ThemingActivity.java, line(s) 5,623
org/telegram/ui/ThemingChatActivity.java, line(s) 4,1371
org/telegram/ui/ThemingChatsActivity.java, line(s) 4,1233
org/telegram/ui/ThemingContactsActivity.java, line(s) 4,461
org/telegram/ui/ThemingDrawerActivity.java, line(s) 4,594
org/telegram/ui/ThemingProfileActivity.java, line(s) 4,527
org/telegram/ui/ThemingSettingsActivity.java, line(s) 4,380

信息 此应用侦听剪贴板更改。一些恶意软件也会监听剪贴板更改

此应用侦听剪贴板更改。一些恶意软件也会监听剪贴板更改
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x04b-Mobile-App-Security-Testing.md#clipboard

Files:
org/telegram/ui/ProxySettingsActivity.java, line(s) 61,93,112,5

信息 应用与Firebase数据库通信

该应用与位于 https://themegramid.firebaseio.com 的 Firebase 数据库进行通信

安全 此应用程序使用Safety Net API。

此应用程序使用Safety Net API。
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05j-Testing-Resiliency-Against-Reverse-Engineering.md#safetynet

Files:
org/telegram/ui/LoginActivity.java, line(s) 77

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (appgallery.huawei.com) 通信。

{'ip': '49.4.34.28', 'country_short': 'CN', 'country_long': '中国', 'region': '北京', 'city': '北京', 'latitude': '39.907501', 'longitude': '116.397102'}

安全评分: ( Plus 11.7.0.3)