安全分析报告: Tele Tools v8.7.4

安全分数


安全分数 46/100

风险评级


等级

  1. A
  2. B
  3. C
  4. F

严重性分布 (%)


隐私风险

5

用户/设备跟踪器


调研结果

高危 8
中危 42
信息 3
安全 3
关注 0

高危 Activity (org.telegram.ui.LaunchActivity) 的启动模式不是standard模式

Activity 不应将启动模式属性设置为 "singleTask/singleInstance",因为这会使其成为根 Activity,并可能导致其他应用程序读取调用 Intent 的内容。因此,当 Intent 包含敏感信息时,需要使用 "standard" 启动模式属性。

高危 Activity (org.telegram.ui.PopupNotificationActivity) 的启动模式不是standard模式

Activity 不应将启动模式属性设置为 "singleTask/singleInstance",因为这会使其成为根 Activity,并可能导致其他应用程序读取调用 Intent 的内容。因此,当 Intent 包含敏感信息时,需要使用 "standard" 启动模式属性。

高危 Activity (com.google.android.play.core.missingsplits.PlayCoreMissingSplitsActivity) 的启动模式不是standard模式

Activity 不应将启动模式属性设置为 "singleTask/singleInstance",因为这会使其成为根 Activity,并可能导致其他应用程序读取调用 Intent 的内容。因此,当 Intent 包含敏感信息时,需要使用 "standard" 启动模式属性。

高危 应用程序使用带PKCS5/PKCS7填充的加密模式CBC。此配置容易受到填充oracle攻击。

应用程序使用带PKCS5/PKCS7填充的加密模式CBC。此配置容易受到填充oracle攻击。
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#identifying-insecure-andor-deprecated-cryptographic-algorithms-mstg-crypto-4

Files:
org/telegram/ui/tools/dex_tv/l2.java, line(s) 28
org/telegram/ui/tools/p/helper/a.java, line(s) 124
org/telegram/ui/tools/p/helper/b.java, line(s) 11

高危 如果一个应用程序使用WebView.loadDataWithBaseURL方法来加载一个网页到WebView,那么这个应用程序可能会遭受跨站脚本攻击

如果一个应用程序使用WebView.loadDataWithBaseURL方法来加载一个网页到WebView,那么这个应用程序可能会遭受跨站脚本攻击
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05h-Testing-Platform-Interaction.md#static-analysis-7

Files:
org/telegram/ui/ArticleViewer.java, line(s) 2751,63,64
org/telegram/ui/Components/t10.java, line(s) 237,241,16,17
org/telegram/ui/Components/zn.java, line(s) 539,543,35,36

高危 该文件是World Readable。任何应用程序都可以读取文件

该文件是World Readable。任何应用程序都可以读取文件
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#testing-local-storage-for-sensitive-data-mstg-storage-1-and-mstg-storage-2

Files:
db/d.java, line(s) 204

高危 已启用远程WebView调试

已启用远程WebView调试
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x04c-Tampering-and-Reverse-Engineering.md#debugging-and-tracing

Files:
org/telegram/ui/ProfileActivity.java, line(s) 707,51

高危 应用程序包含隐私跟踪程序

此应用程序有多个5隐私跟踪程序。跟踪器可以跟踪设备或用户,是终端用户的隐私问题。

中危 应用程序已启用明文网络流量

[android:usesCleartextTraffic=true]
应用程序打算使用明文网络流量,例如明文HTTP,FTP协议,DownloadManager和MediaPlayer。针对API级别27或更低的应用程序,默认值为“true”。针对API级别28或更高的应用程序,默认值为“false”。避免使用明文流量的主要原因是缺乏机密性,真实性和防篡改保护;网络攻击者可以窃听传输的数据,并且可以在不被检测到的情况下修改它。

中危 Activity-Alias (org.telegram.ui.CallsActivity) 受权限保护, 但是应该检查权限的保护级别。

Permission: android.permission.CALL_PHONE [android:exported=true]
发现一个 Activity-Alias被共享给了设备上的其他应用程序,因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此,应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险,一个恶意应用程序可以请求并获得这个权限,并与该组件交互。如果它被设置为签名,只有使用相同证书签名的应用程序才能获得这个权限。

中危 Activity (org.telegram.ui.ShareActivity) 未被保护。

存在一个intent-filter。
发现 Activity与设备上的其他应用程序共享,因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Activity是显式导出的。

中危 Activity (org.telegram.ui.ExternalActionActivity) 未被保护。

存在一个intent-filter。
发现 Activity与设备上的其他应用程序共享,因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Activity是显式导出的。

中危 Activity (org.telegram.ui.ChatsWidgetConfigActivity) 未被保护。

存在一个intent-filter。
发现 Activity与设备上的其他应用程序共享,因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Activity是显式导出的。

中危 Activity (org.telegram.ui.ContactsWidgetConfigActivity) 未被保护。

存在一个intent-filter。
发现 Activity与设备上的其他应用程序共享,因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Activity是显式导出的。

中危 Activity (org.telegram.messenger.OpenChatReceiver) 未被保护。

[android:exported=true]
发现 Activity与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。

中危 Activity (org.telegram.messenger.GoogleVoiceClientActivity) 未被保护。

[android:exported=true]
发现 Activity与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。

中危 Activity设置了TaskAffinity属性

(org.telegram.ui.VoIPPermissionActivity)
如果设置了 taskAffinity,其他应用程序可能会读取发送到属于另一个任务的 Activity 的 Intent。为了防止其他应用程序读取发送或接收的 Intent 中的敏感信息,请始终使用默认设置,将 affinity 保持为包名

中危 Activity设置了TaskAffinity属性

(org.telegram.ui.VoIPFeedbackActivity)
如果设置了 taskAffinity,其他应用程序可能会读取发送到属于另一个任务的 Activity 的 Intent。为了防止其他应用程序读取发送或接收的 Intent 中的敏感信息,请始终使用默认设置,将 affinity 保持为包名

中危 Broadcast Receiver (org.telegram.messenger.SmsReceiver) 未被保护。

[android:exported=true]
发现 Broadcast Receiver与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。

中危 Broadcast Receiver (org.telegram.messenger.CallReceiver) 未被保护。

存在一个intent-filter。
发现 Broadcast Receiver与设备上的其他应用程序共享,因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Broadcast Receiver是显式导出的。

中危 Service (org.telegram.messenger.AuthenticatorService) 未被保护。

[android:exported=true]
发现 Service与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。

中危 Service (org.telegram.messenger.ContactsSyncAdapterService) 未被保护。

[android:exported=true]
发现 Service与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。

中危 Service (org.telegram.messenger.MusicPlayerService) 未被保护。

[android:exported=true]
发现 Service与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。

中危 Service (org.telegram.messenger.MusicBrowserService) 未被保护。

[android:exported=true]
发现 Service与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。

中危 Service (org.telegram.messenger.voip.TelegramConnectionService) 受权限保护, 但是应该检查权限的保护级别。

Permission: android.permission.BIND_TELECOM_CONNECTION_SERVICE [android:exported=true]
发现一个 Service被共享给了设备上的其他应用程序,因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此,应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险,一个恶意应用程序可以请求并获得这个权限,并与该组件交互。如果它被设置为签名,只有使用相同证书签名的应用程序才能获得这个权限。

中危 Broadcast Receiver (org.telegram.messenger.MusicPlayerReceiver) 未被保护。

存在一个intent-filter。
发现 Broadcast Receiver与设备上的其他应用程序共享,因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Broadcast Receiver是显式导出的。

中危 Broadcast Receiver (org.telegram.messenger.AppStartReceiver) 未被保护。

存在一个intent-filter。
发现 Broadcast Receiver与设备上的其他应用程序共享,因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Broadcast Receiver是显式导出的。

中危 Broadcast Receiver (org.telegram.messenger.RefererReceiver) 受权限保护, 但是应该检查权限的保护级别。

Permission: android.permission.INSTALL_PACKAGES [android:exported=true]
发现一个 Broadcast Receiver被共享给了设备上的其他应用程序,因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此,应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险,一个恶意应用程序可以请求并获得这个权限,并与该组件交互。如果它被设置为签名,只有使用相同证书签名的应用程序才能获得这个权限。

中危 Content Provider (org.telegram.messenger.voip.CallNotificationSoundProvider) 未被保护。

[android:exported=true]
发现 Content Provider与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。

中危 Service (org.telegram.messenger.GcmPushListenerService) 未被保护。

存在一个intent-filter。
发现 Service与设备上的其他应用程序共享,因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Service是显式导出的。

中危 Service (org.telegram.ui.tools.p.service.PServices) 未被保护。

[android:exported=true]
发现 Service与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。

中危 Service (org.telegram.ui.tools.p.service.SmartAdsService) 未被保护。

[android:exported=true]
发现 Service与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。

中危 Activity (org.telegram.ui.tools.p.utlis.DialogShowAdsActivity) 未被保护。

[android:exported=true]
发现 Activity与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。

中危 Activity (org.telegram.ui.tools.p.utlis.PhotoShowAdsActivity) 未被保护。

[android:exported=true]
发现 Activity与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。

中危 Service (androidx.sharetarget.ChooserTargetServiceCompat) 受权限保护, 但是应该检查权限的保护级别。

Permission: android.permission.BIND_CHOOSER_TARGET_SERVICE [android:exported=true]
发现一个 Service被共享给了设备上的其他应用程序,因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此,应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险,一个恶意应用程序可以请求并获得这个权限,并与该组件交互。如果它被设置为签名,只有使用相同证书签名的应用程序才能获得这个权限。

中危 Broadcast Receiver (com.google.firebase.iid.FirebaseInstanceIdReceiver) 受权限保护, 但是应该检查权限的保护级别。

Permission: com.google.android.c2dm.permission.SEND [android:exported=true]
发现一个 Broadcast Receiver被共享给了设备上的其他应用程序,因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此,应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险,一个恶意应用程序可以请求并获得这个权限,并与该组件交互。如果它被设置为签名,只有使用相同证书签名的应用程序才能获得这个权限。

中危 Broadcast Receiver (com.batch.android.BatchPushMessageReceiver) 受权限保护, 但是应该检查权限的保护级别。

Permission: com.google.android.c2dm.permission.SEND [android:exported=true]
发现一个 Broadcast Receiver被共享给了设备上的其他应用程序,因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此,应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险,一个恶意应用程序可以请求并获得这个权限,并与该组件交互。如果它被设置为签名,只有使用相同证书签名的应用程序才能获得这个权限。

中危 Service (com.google.android.gms.auth.api.signin.RevocationBoundService) 受权限保护, 但是应该检查权限的保护级别。

Permission: com.google.android.gms.auth.api.signin.permission.REVOCATION_NOTIFICATION [android:exported=true]
发现一个 Service被共享给了设备上的其他应用程序,因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此,应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险,一个恶意应用程序可以请求并获得这个权限,并与该组件交互。如果它被设置为签名,只有使用相同证书签名的应用程序才能获得这个权限。

中危 Service (androidx.work.impl.background.systemjob.SystemJobService) 受权限保护, 但是应该检查权限的保护级别。

Permission: android.permission.BIND_JOB_SERVICE [android:exported=true]
发现一个 Service被共享给了设备上的其他应用程序,因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此,应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险,一个恶意应用程序可以请求并获得这个权限,并与该组件交互。如果它被设置为签名,只有使用相同证书签名的应用程序才能获得这个权限。

中危 Service (com.google.android.play.core.assetpacks.AssetPackExtractionService) 未被保护。

[android:exported=true]
发现 Service与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。

中危 SHA-1是已知存在哈希冲突的弱哈希

SHA-1是已知存在哈希冲突的弱哈希
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#identifying-insecure-andor-deprecated-cryptographic-algorithms-mstg-crypto-4

Files:
com/batch/android/g0/b.java, line(s) 22
d7/b.java, line(s) 51
org/telegram/messenger/Utilities.java, line(s) 194,217
org/telegram/ui/xo0.java, line(s) 5830
q1/j.java, line(s) 68

中危 应用程序创建临时文件。敏感信息永远不应该被写进临时文件

应用程序创建临时文件。敏感信息永远不应该被写进临时文件


Files:
d7/c.java, line(s) 66
m0/b.java, line(s) 118
v9/d0.java, line(s) 22

中危 应用程序使用不安全的随机数生成器

应用程序使用不安全的随机数生成器
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#weak-random-number-generators

Files:
a4/b.java, line(s) 4
cb/a.java, line(s) 5
com/batch/android/g0/n0.java, line(s) 7
j$/util/concurrent/ThreadLocalRandom.java, line(s) 17
l1/b.java, line(s) 3
na/f.java, line(s) 7
org/telegram/messenger/GcmPushListenerService$1.java, line(s) 6
org/telegram/messenger/GcmPushListenerService$2.java, line(s) 6
org/telegram/messenger/GcmPushListenerService$3.java, line(s) 6
org/telegram/messenger/Jsoner.java, line(s) 34
org/telegram/messenger/Utilities.java, line(s) 34
org/telegram/ui/Components/g6.java, line(s) 7
org/telegram/ui/Components/i5.java, line(s) 6
org/telegram/ui/Components/kl.java, line(s) 7
org/telegram/ui/Components/pq.java, line(s) 12
org/telegram/ui/Components/q90.java, line(s) 14
org/telegram/ui/Components/ts.java, line(s) 17
org/telegram/ui/Components/u5.java, line(s) 11
org/telegram/ui/Components/vw.java, line(s) 6
org/telegram/ui/d71.java, line(s) 22
org/telegram/ui/tools/p/helper/a.java, line(s) 8
org/telegram/ui/tools/p/service/PServices.java, line(s) 8
org/telegram/ui/tv.java, line(s) 10
ra/h0.java, line(s) 19
ra/v1.java, line(s) 12

中危 应用程序使用SQLite数据库并执行原始SQL查询。原始SQL查询中不受信任的用户输入可能会导致SQL注入。敏感信息也应加密并写入数据库

应用程序使用SQLite数据库并执行原始SQL查询。原始SQL查询中不受信任的用户输入可能会导致SQL注入。敏感信息也应加密并写入数据库
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x04h-Testing-Code-Quality.md#injection-flaws-mstg-arch-2-and-mstg-platform-2

Files:
com/batch/android/l0/c.java, line(s) 4,5,51,52,53
com/batch/android/l0/d.java, line(s) 6,7,294,313,346
com/batch/android/n0/b.java, line(s) 5,6,38
com/batch/android/n0/c.java, line(s) 6,55,75,120
com/batch/android/t0/a.java, line(s) 4,5,41,47,50
com/batch/android/u0/b.java, line(s) 7,8,9,182,240,419
com/batch/android/u0/f.java, line(s) 4,5,37,38
f2/l0.java, line(s) 7,8,68,95,107,111,182,313,339,514
f2/s0.java, line(s) 4,5,109
ga/b.java, line(s) 5,6,7,67,70,84,116,119,142,145,158
ga/c.java, line(s) 5,6,7,45,48
hb/b.java, line(s) 6,7,103
t0/a.java, line(s) 4,5,6,7,59
ta/a.java, line(s) 4,5,14,15,17,22,23,29,30,31
ta/b.java, line(s) 4,5,14,18
ta/c.java, line(s) 6,7,27

中危 文件可能包含硬编码的敏感信息,如用户名、密码、密钥等

文件可能包含硬编码的敏感信息,如用户名、密码、密钥等
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#checking-memory-for-sensitive-data-mstg-storage-10

Files:
com/batch/android/Batch.java, line(s) 286,284,285,287
com/batch/android/BatchActionActivity.java, line(s) 12
com/batch/android/BatchMessage.java, line(s) 10
com/batch/android/BatchPushJobService.java, line(s) 11
h6/c.java, line(s) 81
org/telegram/messenger/Jsoner.java, line(s) 60,61,63,64
org/telegram/messenger/MediaDataController.java, line(s) 53,59,58
org/telegram/messenger/voip/Instance.java, line(s) 241,173

中危 应用程序可以读取/写入外部存储器,任何应用程序都可以读取写入外部存储器的数据

应用程序可以读取/写入外部存储器,任何应用程序都可以读取写入外部存储器的数据
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#external-storage

Files:
org/telegram/messenger/AndroidUtilities.java, line(s) 1272,1306,1313,1363,1462,1619
org/telegram/messenger/ApplicationLoader.java, line(s) 444,449,549
org/telegram/messenger/EmuDetector.java, line(s) 98
org/telegram/messenger/FileLog.java, line(s) 31,117,136,220
org/telegram/messenger/FilesMigrationService.java, line(s) 288,151,272
org/telegram/messenger/MediaController$MediaLoader.java, line(s) 181
org/telegram/messenger/SharedConfig.java, line(s) 456,467
org/telegram/messenger/Utilities.java, line(s) 166,533,562,601
org/telegram/messenger/voip/VoIPController.java, line(s) 89
org/telegram/ui/Components/bh.java, line(s) 1667,1667,1667,1670,1692
org/telegram/ui/Components/voip/u1.java, line(s) 164,1001
org/telegram/ui/ProfileActivity.java, line(s) 6667
org/telegram/ui/tools/activty/d.java, line(s) 532,532,532,539,570

中危 不安全的Web视图实现。可能存在WebView任意代码执行漏洞

不安全的Web视图实现。可能存在WebView任意代码执行漏洞
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05h-Testing-Platform-Interaction.md#testing-javascript-execution-in-webviews-mstg-platform-5

Files:
org/telegram/ui/ArticleViewer.java, line(s) 2690,2684
org/telegram/ui/Components/WebPlayerView.java, line(s) 1143,1150
org/telegram/ui/Components/e7.java, line(s) 703,688
org/telegram/ui/Components/t10.java, line(s) 216,137
org/telegram/ui/Components/zn.java, line(s) 518,677
org/telegram/ui/tk1.java, line(s) 450,436

中危 MD5是已知存在哈希冲突的弱哈希

MD5是已知存在哈希冲突的弱哈希
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#identifying-insecure-andor-deprecated-cryptographic-algorithms-mstg-crypto-4

Files:
com/batch/android/g0/n.java, line(s) 39,28
org/telegram/messenger/MessagesController.java, line(s) 3143
org/telegram/messenger/Utilities.java, line(s) 73

中危 IP地址泄露

IP地址泄露


Files:
org/telegram/messenger/EmuDetector.java, line(s) 18

中危 此应用可能包含硬编码机密信息

从应用程序中识别出以下机密确保这些不是机密或私人信息
AdMob广告平台的=> "com.google.android.gms.ads.APPLICATION_ID" : "ca-app-pub-3940256099942544~3347511713"
"CancelPasswordResetNo" : "NEIN"
"UseProxySecret" : "Secret"
"CancelPasswordResetNo" : "NO"
"CancelPasswordResetYes" : "HA"
"PasswordCode" : "Code"
"RestorePasswordNoEmailTitle" : "Spiacenti"
"TypePrivateGroup" : "Privat"
"UseProxySecret" : "Yashirin"
"ChannelTypePrivate" : "Private"
"TypePrivate" : "Prywatny"
"LoginPassword" : "Parol"
"PasswordOff" : "Apagado"
"PasscodePassword" : "Senha"
"TypePrivateGroup" : "Xususiy"
"UseProxySecret" : "Sekret"
"ChannelTypePrivate" : "Xususiy"
"PasswordOff" : "No"
"CheckPasswordPerfect" : "Perfect!"
"PasscodePassword" : "Parola"
"PaymentPasswordTitle" : "Password"
"PasscodePassword" : "Sandi"
"ReportSpamUser" : "BLOQUEAR"
"BotToken" : "Gettone"
"TypePrivate" : "Xususiy"
"TypePrivate" : "Gizli"
"ReportSpamUser" : "BLOKIR"
"BotToken" : "Jeton"
"CancelPasswordResetNo" : "YOQ"
"CancelPasswordResetYes" : "SIM"
"CancelPasswordResetNo" : "NIE"
"RestorePasswordNoEmailTitle" : "Maaf"
"NotificationHiddenChatUserName" : "Utilisateur"
"YourPasswordSuccess" : "Success!"
"UseProxySecret" : "Gizli"
"ChannelTypePrivate" : "Privado"
"Username" : "Nutzername"
"RestorePasswordNoEmailTitle" : "Kechirasiz"
"UseProxySecret" : "Segredo"
"CancelPasswordResetNo" : "TIDAK"
"YourPasswordRememberNo" : "Niepewny"
"UseProxyPassword" : "Sandi"
"UseProxyUsername" : "Nutzername"
"RestorePasswordNoEmailTitle" : "Sorry"
"NotificationHiddenChatUserName" : "Nutzer"
"YourPasswordSuccess" : "Sukces!"
"ChannelTypePrivate" : "Privato"
"BotToken" : "Token"
"PasscodePassword" : "Parol"
"PasswordOn" : "En"
"YourPasswordHeader" : "Parolingiz"
"CancelPasswordResetYes" : "OUI"
"LoginPassword" : "Senha"
"PasswordOff" : "Off"
"UseProxyPassword" : "Parol"
"PaymentPasswordTitle" : "Parol"
"com_batchsdk_local_campaign_debug_fragment_token" : "Token"
"PasswordRecovery" : "Passwort-Wiederherstellung"
"UseProxyPassword" : "Parola"
"PasswordOn" : "Nyala"
"google_crash_reporting_api_key" : "AIzaSyDgfHzB0cppfDz8bCBJ4_vXxEqucxnKFz8"
"Token" : "Gettone"
"PaymentPasswordTitle" : "Senha"
"NotificationHiddenChatUserName" : "User"
"CancelPasswordResetNo" : "NON"
"PasswordOff" : "Mati"
"TypePrivate" : "Privat"
"PasswordOff" : "Ochirilgan"
"google_app_id" : "1:718227292047:android:c329846d130bb9c1ebd5fa"
"BotToken" : "Zeichen"
"TypePrivateGroup" : "Privado"
"PasswordCode" : "Codice"
"LoginPassword" : "Passwort"
"TypePrivate" : "Privado"
"TypePrivateGroup" : "Private"
"LoginPassword" : "Parola"
"ChannelTypePrivate" : "Pribadi"
"PasswordManager" : "Passwortverwaltung"
"Token" : "Znak"
"CancelPasswordResetYes" : "IYA"
"CancelPasswordResetYes" : "EVET"
"UseProxySecret" : "Rahasia"
"UseProxyPassword" : "Passwort"
"UseProxyUsername" : "Username"
"PasswordOn" : "Yoqilgan"
"PasswordCode" : "Kod"
"NotificationHiddenChatUserName" : "Usuario"
"PaymentPasswordEmailTitle" : "Wiederherstellungs-E-Mail"
"ChannelTypePrivate" : "Privat"
"YourPasswordSuccess" : "Berhasil!"
"PaymentPasswordTitle" : "Parola"
"PasswordOn" : "On"
"PasscodePassword" : "Passwort"
"UseProxyPassword" : "Senha"
"UseProxySecret" : "Secreto"
"UseProxyPassword" : "Password"
"CancelPasswordResetYes" : "JA"
"TypePrivateGroup" : "Prywatna"
"Token" : "Zeichen"
"NotificationHiddenChatUserName" : "Utente"
"YourPassword" : "Parolingiz"
"BotToken" : "Znak"
"TypePrivateGroup" : "Gizli"
"CancelPasswordResetNo" : "HAYIR"
"PaymentPasswordTitle" : "Passwort"
"ReportSpamUser" : "BLOQUER"
"TypePrivate" : "Private"
"PasswordOff" : "aus"
"NotificationHiddenChatUserName" : "Pengguna"
"Token" : "Jeton"
"google_api_key" : "AIzaSyDgfHzB0cppfDz8bCBJ4_vXxEqucxnKFz8"
"PasswordCode" : "Kode"
"PasscodePassword" : "Password"
"PasswordOn" : "Auf"
"RestorePasswordNoEmailTitle" : "Desculpe"
"NotificationHiddenChatUserName" : "Foydalanuvchi"
"LoginPassword" : "Password"
"TypePrivate" : "Privato"
"CancelPasswordResetYes" : "TAK"
"UseProxySecret" : "Segreto"
"Username" : "Username"
"PasswordOff" : "Desativada"
"CancelPasswordResetYes" : "YES"
"ChannelTypePrivate" : "Prywatny"
"TypePrivateGroup" : "Privato"
"YourPasswordSuccess" : "Fatto!"
"UseProxySecret" : "Geheimnis"
"AbortPasswordMenu" : "Cancelar"
"PasswordOn" : "Ativada"
"Token" : "Token"
"RestorePasswordNoEmailTitle" : "Przepraszamy"
wmsAuthSign=b5e04648293f76772a90791b581c99e3
ot=aXNfZnJlZT0xJnNlcnZlcl90aW1lPTYvMTQvMjAyMSAyOjIwOjQzIFBNJmhhc2hfdmFsdWU9OFhjYzRYSG5Ta0Mvdm8rQjFLUi9Mdz09JnZhbGlkbWludXRlcz02MDAw
ot=aXNfZnJlZT0xJnNlcnZlcl90aW1lPTYvMTQvMjAyMSAyOjE3OjI5IFBNJmhhc2hfdmFsdWU9RjVIUmtmMkNtTWpCMTd0Y1dsSWIrQT09JnZhbGlkbWludXRlcz02MDAw
JY+Cn0qwsdiDNm7bRMKW8A==
4c56c404c0cd864269ea87b45a0e0c18
ot=aXNfZnJlZT0xJnNlcnZlcl90aW1lPTYvMTQvMjAyMSAyOjE2OjUzIFBNJmhhc2hfdmFsdWU9TnI4cFpXdGM2bnNpVG9tOCtIRlk5UT09JnZhbGlkbWludXRlcz02MDAw
ot=aXNfZnJlZT0xJnNlcnZlcl90aW1lPTYvMTQvMjAyMSAyOjg6MjMgUE0maGFzaF92YWx1ZT1Fd1lVNG5YeDZRTmhGZUpvRlNvc29nPT0mdmFsaWRtaW51dGVzPTYwMDA=
ot=aXNfZnJlZT0xJnNlcnZlcl90aW1lPTYvMTQvMjAyMSAyOjEwOjEyIFBNJmhhc2hfdmFsdWU9SG5VMjdHd05RRi92K3NCZzd2WnBYZz09JnZhbGlkbWludXRlcz02MDAw
ot=aXNfZnJlZT0xJnNlcnZlcl90aW1lPTYvMTQvMjAyMSAyOjIwOjU0IFBNJmhhc2hfdmFsdWU9OEtKeTFpWllYc2ZmdUkvbGpCV2Z3Zz09JnZhbGlkbWludXRlcz02MDAw
SVqWumuteCQHvVIaALrOZXuzVVVeS7f4FGxxu6V+es4=
3e1a68e15b0801c43b69f712b3eb75c1
1967217306c8b4164dd074a6d2f854b1
wmsAuthSign=2802daf4c39f07591a59b78cab367eb3
b16b3b3ea616313e42f8ef5c45c8f1d1
ot=aXNfZnJlZT0xJnNlcnZlcl90aW1lPTYvMTQvMjAyMSAyOjE5OjIzIFBNJmhhc2hfdmFsdWU9NklxWmtnUWtpS1JRRkNhRkk1bjFBUT09JnZhbGlkbWludXRlcz02MDAw
wmsAuthSign=3e1a68e15b0801c43b69f712b3eb75c1
ot=aXNfZnJlZT0xJnNlcnZlcl90aW1lPTYvMTQvMjAyMSAyOjE4OjE1IFBNJmhhc2hfdmFsdWU9YVNsdzBLRUluTDhOTmlEdTVCTm9LQT09JnZhbGlkbWludXRlcz02MDAw
ot=aXNfZnJlZT0xJnNlcnZlcl90aW1lPTYvMTQvMjAyMSAyOjE3OjM1IFBNJmhhc2hfdmFsdWU9YVQ2MGJHVUp3U0hlc1NiMHpoU29XZz09JnZhbGlkbWludXRlcz02MDAw
f94b1b3768856ce773d476c57675647e
f696303d88c17ba2741648912bd7d9d1
WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18=
ot=aXNfZnJlZT0xJnNlcnZlcl90aW1lPTYvMTQvMjAyMSAyOjIxOjEzIFBNJmhhc2hfdmFsdWU9cHYyaGFDbkovcDJ5aXovNGRYVjRBZz09JnZhbGlkbWludXRlcz02MDAw
rlUZNDehZJQb8XsqzCjLeQDBN4R8TydAkoeG4tiGOmPY62WYo
ot=aXNfZnJlZT0xJnNlcnZlcl90aW1lPTYvMTQvMjAyMSAyOjEzOjE0IFBNJmhhc2hfdmFsdWU9bmoya3JBZDVkbWhNd2RySVpLcllldz09JnZhbGlkbWludXRlcz02MDAw
uUwZgwDOxcBXrQcntwu+kYFpkiVkOaezL0WYEZ3anJc=
ot=aXNfZnJlZT0xJnNlcnZlcl90aW1lPTYvMTQvMjAyMSAyOjE0OjI0IFBNJmhhc2hfdmFsdWU9aFFhL1I0SGRlalJVM3VneXowbkJJQT09JnZhbGlkbWludXRlcz02MDAw
15d6f03e4d936187fc42fc6c08c4fd75
8d21af41a9f59344941819569e77c80c
553443519b98733c1b8961cf7c10f158
wmsAuthSign=bf188e3d2c86b0571fbd5591f88eaae7
aHR0cHM6Ly9kbnMzLjAwZ29vZ2xlLmluZm8v
wmsAuthSign=6d9c8c7aa0d1ebecfe96e05bb2675861
wmsAuthSign=1967217306c8b4164dd074a6d2f854b1
ot=aXNfZnJlZT0xJnNlcnZlcl90aW1lPTYvMTQvMjAyMSAyOjIxOjEwIFBNJmhhc2hfdmFsdWU9emZBZGZpcnFjR0RYOHRGRXJWNk5Mdz09JnZhbGlkbWludXRlcz02MDAw
ot=aXNfZnJlZT0xJnNlcnZlcl90aW1lPTYvMTQvMjAyMSAyOjE3OjUwIFBNJmhhc2hfdmFsdWU9S1llVkdxT3I3L3pzZXNQV0hSclRsUT09JnZhbGlkbWludXRlcz02MDAw
c43a68ace6f2afbcc88615dfb52902ce
ot=aXNfZnJlZT0xJnNlcnZlcl90aW1lPTYvMTQvMjAyMSAyOjg6MTcgUE0maGFzaF92YWx1ZT14cDZ5V2JaeFRPVVBIRlVkKzlSVkVRPT0mdmFsaWRtaW51dGVzPTYwMDA=
0000016742C00BDA259000000168CE0F13200000016588840DCE7118A0002FBF1C31C3275D78
wmsAuthSign=0c95a42af110afc4dcf5503847e65171
wmsAuthSign=4ea6ccda58a8f30b1fcb4dec771b1e65
0c3b8f58fc9cf93bfb151d9400c8f795
ot=aXNfZnJlZT0xJnNlcnZlcl90aW1lPTYvMTQvMjAyMSAyOjE0OjMyIFBNJmhhc2hfdmFsdWU9Z1BNTU9meG1RU3h3Z25GWkVuSWdjQT09JnZhbGlkbWludXRlcz02MDAw
ot=aXNfZnJlZT0xJnNlcnZlcl90aW1lPTYvMTQvMjAyMSAyOjEyOjQ0IFBNJmhhc2hfdmFsdWU9NzVXanhTZWZUZ01pd2xrZXBmNUc0dz09JnZhbGlkbWludXRlcz02MDAw
cab5a50adb4ccbae74b5a4d1c3a403d2
wmsAuthSign=dc63c69d74de37cb50ebab7fe185c16b
ot=aXNfZnJlZT0xJnNlcnZlcl90aW1lPTYvMTQvMjAyMSAyOjE5OjEwIFBNJmhhc2hfdmFsdWU9NU9EMDkxMW1yNzBXNWlrNDhicFI1UT09JnZhbGlkbWludXRlcz02MDAw
ot=aXNfZnJlZT0xJnNlcnZlcl90aW1lPTYvMTQvMjAyMSAyOjE0OjE2IFBNJmhhc2hfdmFsdWU9ako4WGdFSCtWa00vUVg3OEM5SFdlQT09JnZhbGlkbWludXRlcz02MDAw
ABVGDE2JZIQKLMNOPRSTUFHC34WXY9678
bb392ec0-8d4d-11e0-a896-0002a5d5c51b
ot=aXNfZnJlZT0xJnNlcnZlcl90aW1lPTYvMTQvMjAyMSAyOjE3OjMxIFBNJmhhc2hfdmFsdWU9akR4Q2J6c2dMMjNES2pZdmcrK2p1dz09JnZhbGlkbWludXRlcz02MDAw
470fa2b4ae81cd56ecbcda9735803434cec591fa
600FDA5EA5A05B32DC147012D4DA7F
wmsAuthSign=85f57a6b15bd17e49f7b83dc27f9662e
8c9dbfe58437d1739540f5d53c72ae4b
fccaf47420f5ae97b6fab5b9c17f3bbd
wmsAuthSign=c43a68ace6f2afbcc88615dfb52902ce
293ef6e9bae360eac51259
0989bbbd512f012b0e88646b37f5400c
622fd9f8108fb7e0aa912c3abcebbf80
85f57a6b15bd17e49f7b83dc27f9662e
1a70a2edbebae72564b0f345fcf5ab29
09f7fac8cb6f0b7bf92161e34167b01e
c08ee62eb187562b938cbdfba6efd8ce
ot=aXNfZnJlZT0xJnNlcnZlcl90aW1lPTYvMTQvMjAyMSAyOjExOjcgUE0maGFzaF92YWx1ZT00OEhRZnB1dVE5NDFaMlV3K1F0SHZBPT0mdmFsaWRtaW51dGVzPTYwMDA=
ot=aXNfZnJlZT0xJnNlcnZlcl90aW1lPTYvMTQvMjAyMSAyOjE2OjQzIFBNJmhhc2hfdmFsdWU9MUpsL3VYME1yc1ZNTExQT2xXK09EZz09JnZhbGlkbWludXRlcz02MDAw
6725dc54945ebc959e624679fc4c3fd4
00eb035a7652f23755c955f165888f01
wmsAuthSign=35b9322b3e7c0a161888db702f166871
ot=aXNfZnJlZT0xJnNlcnZlcl90aW1lPTYvMTQvMjAyMSAyOjc6MjkgUE0maGFzaF92YWx1ZT1ZK2g4ZVNNVXBLc2lRV2htZGpjRm5BPT0mdmFsaWRtaW51dGVzPTYwMDA=
ot=aXNfZnJlZT0xJnNlcnZlcl90aW1lPTYvMTQvMjAyMSAyOjg6MjMgUE0maGFzaF92YWx1ZT1QWjhVL2pUZy8rclJtTGVWcGNDSXl3PT0mdmFsaWRtaW51dGVzPTYwMDA=
1706190b5a3f9c7cfc8e379161e6479b
UZJDjsNp1+4M5x9cbbdflB779y5YRBcV6Z6rBMLIrO4=
a950819a37395d7c4a7f8993e433ac1d
35b9322b3e7c0a161888db702f166871
16610039c34cb3556d63449618cca796
ot=aXNfZnJlZT0xJnNlcnZlcl90aW1lPTYvMTQvMjAyMSAyOjY6MjAgUE0maGFzaF92YWx1ZT1ienFHSmo3akFoeFEwMXQwWTZudW1nPT0mdmFsaWRtaW51dGVzPTYwMDA=
ot=aXNfZnJlZT0xJnNlcnZlcl90aW1lPTYvMTQvMjAyMSAyOjc6MzAgUE0maGFzaF92YWx1ZT0zSDJPUUc5MWtoUG9wcnJBQWtrL01BPT0mdmFsaWRtaW51dGVzPTYwMDA=
aHR0cHM6Ly9kbnMuMDAwMjEyZ3JhaGFtYmVsLmluZm8v
29b8d55cfea0a2ac34b606cf1d18fa9a
9f2e240cfebb811cacd08fbe00e9fe4b
3cc2761b9c14520bcf137f2f17287a1d
ot=aXNfZnJlZT0xJnNlcnZlcl90aW1lPTYvMTQvMjAyMSAyOjE5OjI2IFBNJmhhc2hfdmFsdWU9ZHovZkNweW0xNG0rTzFXUloySzFLUT09JnZhbGlkbWludXRlcz02MDAw
b5e04648293f76772a90791b581c99e3
ot=aXNfZnJlZT0xJnNlcnZlcl90aW1lPTYvMTQvMjAyMSAyOjE2OjU2IFBNJmhhc2hfdmFsdWU9a3F1RDhjTE5XRDc3OHY1RlNuQlFZUT09JnZhbGlkbWludXRlcz02MDAw
ot=aXNfZnJlZT0xJnNlcnZlcl90aW1lPTYvMTQvMjAyMSAyOjE5OjIxIFBNJmhhc2hfdmFsdWU9eVcrbklQc0VRczR3cWNQcnJKam5oZz09JnZhbGlkbWludXRlcz02MDAw
c06c8400-8e06-11e0-9cb6-0002a5d5c51b
ot=aXNfZnJlZT0xJnNlcnZlcl90aW1lPTYvMTQvMjAyMSAyOjE1OjI4IFBNJmhhc2hfdmFsdWU9VUxXbmh2eUV4UlhxTVM5SUlxWVVpQT09JnZhbGlkbWludXRlcz02MDAw
5ec1102217701566a6db88d6385861ba
wmsAuthSign=1a70a2edbebae72564b0f345fcf5ab29
ot=aXNfZnJlZT0xJnNlcnZlcl90aW1lPTYvMTQvMjAyMSAyOjEyOjkgUE0maGFzaF92YWx1ZT1FaTU3Rk5RdjFPbjM2SUwzVWh1MGdRPT0mdmFsaWRtaW51dGVzPTYwMDA=
Wd8xe/qfTwq3ylFNd3IpaqLHZbh2ZNCLluVzmeNkcpw=
014b35b6184100b085b0d0572f9b5103
wmsAuthSign=d26089291486ebdafbec8109e8e115f3
aHR0cHM6Ly9kbnM0LjAweWFuZGV4LmluZm8v
f628db0292b6b6666c75cda6241d3701
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
d26089291486ebdafbec8109e8e115f3
B3EEABB8EE11C2BE770B684D95219ECB
ot=aXNfZnJlZT0xJnNlcnZlcl90aW1lPTYvMTQvMjAyMSAyOjU6NTAgUE0maGFzaF92YWx1ZT0yd0E3eitrQWh3KzY0ckJNZGltUlh3PT0mdmFsaWRtaW51dGVzPTYwMDA=
ot=aXNfZnJlZT0xJnNlcnZlcl90aW1lPTYvMTQvMjAyMSAyOjEwOjUxIFBNJmhhc2hfdmFsdWU9KzdMTVo4cW43MzlLVEdsZnJEMlBOZz09JnZhbGlkbWludXRlcz02MDAw
ot=aXNfZnJlZT0xJnNlcnZlcl90aW1lPTYvMTQvMjAyMSAyOjk6MyBQTSZoYXNoX3ZhbHVlPWFiZytibjBEdnNCbmNxK29JN2F4Tnc9PSZ2YWxpZG1pbnV0ZXM9NjAwMA==
dc63c69d74de37cb50ebab7fe185c16b
8801db477bd9b890ab84c773397bd01b
49C1522548EBACD46CE322B6FD47F6092BB745D0F88082145CAF35E14DCC38E1
7d9fb75b1d6af4b66a139942a794eab7
ot=aXNfZnJlZT0xJnNlcnZlcl90aW1lPTYvMTQvMjAyMSAyOjE1OjYgUE0maGFzaF92YWx1ZT1RbDdHdTE5MjhCM2p6TXJvWWs1VjFRPT0mdmFsaWRtaW51dGVzPTYwMDA=
bf188e3d2c86b0571fbd5591f88eaae7
4d24254fa51c800317b228c88f9ca07a
JbQbUG5JMJUoI6brnx0x3vZF6jilxsapbXGVfjhN8Fg=
bd6d7dac63585b5ed7dc8d1433f6bce6
2802daf4c39f07591a59b78cab367eb3
ot=aXNfZnJlZT0xJnNlcnZlcl90aW1lPTYvMTQvMjAyMSAyOjg6MjIgUE0maGFzaF92YWx1ZT1ud3hhL3BXYXVGNE00dnBPNGtOS0pBPT0mdmFsaWRtaW51dGVzPTYwMDA=
wmsAuthSign=0989bbbd512f012b0e88646b37f5400c
0c95a42af110afc4dcf5503847e65171
cAajgxHlj7GTSEIzIYIQxmEloOSoJq7VOaxWHfv72QM=
ee269fdd1e3cbfc82fc5e9cc1e95f2ad
ot=aXNfZnJlZT0xJnNlcnZlcl90aW1lPTYvMTQvMjAyMSAyOjEyOjUyIFBNJmhhc2hfdmFsdWU9ek44ZllvTVlSMGRGbGxtdVlnRHRYZz09JnZhbGlkbWludXRlcz02MDAw
ot=aXNfZnJlZT0xJnNlcnZlcl90aW1lPTYvMTQvMjAyMSAyOjE3OjEzIFBNJmhhc2hfdmFsdWU9S082WFZMd0N4aDd2WGdpVitZRTV3UT09JnZhbGlkbWludXRlcz02MDAw
ot=aXNfZnJlZT0xJnNlcnZlcl90aW1lPTYvMTQvMjAyMSAyOjIxOjExIFBNJmhhc2hfdmFsdWU9UVd2SUxZN1A0cTJzTzkzT01YS3RMQT09JnZhbGlkbWludXRlcz02MDAw
wmsAuthSign=29b8d55cfea0a2ac34b606cf1d18fa9a
ot=aXNfZnJlZT0xJnNlcnZlcl90aW1lPTYvMTQvMjAyMSAyOjExOjMzIFBNJmhhc2hfdmFsdWU9enExN3NoSkVxZXAzNUtwWlRTVm5CUT09JnZhbGlkbWludXRlcz02MDAw
ot=aXNfZnJlZT0xJnNlcnZlcl90aW1lPTYvMTQvMjAyMSAyOjQ6NTUgUE0maGFzaF92YWx1ZT1BMkhQU0pHeU8vb1p3RGNEekpKTmZ3PT0mdmFsaWRtaW51dGVzPTYwMDA=
6d9c8c7aa0d1ebecfe96e05bb2675861
d2ea29cf56ed569a40fbdae259eec604
ea7d15a0cf98fddc2e171d596fac194b
ot=aXNfZnJlZT0xJnNlcnZlcl90aW1lPTYvMTQvMjAyMSAyOjk6MTkgUE0maGFzaF92YWx1ZT01eGRBcnhkSDhERzZXTWh6cWNCTW9RPT0mdmFsaWRtaW51dGVzPTYwMDA=
wmsAuthSign=ea7d15a0cf98fddc2e171d596fac194b
ot=aXNfZnJlZT0xJnNlcnZlcl90aW1lPTYvMTQvMjAyMSAyOjExOjYgUE0maGFzaF92YWx1ZT1IVnlIaFhCZGJOZjM3YjdsaXRGK1VnPT0mdmFsaWRtaW51dGVzPTYwMDA=
aHR0cHM6Ly9kbnMyLjAwZ21haWwuaW5mby8=
ot=aXNfZnJlZT0xJnNlcnZlcl90aW1lPTYvMTQvMjAyMSAyOjIwOjU4IFBNJmhhc2hfdmFsdWU9NzFod2QwVi9qUXdxRFQ5T2pXNnFNQT09JnZhbGlkbWludXRlcz02MDAw
ot=aXNfZnJlZT0xJnNlcnZlcl90aW1lPTYvMTQvMjAyMSAyOjE0OjI2IFBNJmhhc2hfdmFsdWU9Mk1mcTQxTlNDMkNUU2xZZG1oMEVqZz09JnZhbGlkbWludXRlcz02MDAw
edef8ba9-79d6-4ace-a3c8-27dcd51d21ed
4ea6ccda58a8f30b1fcb4dec771b1e65
2cfbe6a8fd21cabc6c015b35e1903f1b

信息 应用程序记录日志信息,不得记录敏感信息

应用程序记录日志信息,不得记录敏感信息
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#logs

Files:
a0/b.java, line(s) 36,48,60,74
a6/g.java, line(s) 31,38,41,50,84,108
a6/o.java, line(s) 102
aa/c0.java, line(s) 110
aa/n.java, line(s) 129,132,150,372,668
aa/p.java, line(s) 306,311,328
aa/p0.java, line(s) 1914
b0/a.java, line(s) 25,30,47,52,57,65,70
b0/d.java, line(s) 19
b2/a.java, line(s) 7,11,15,23,27
b5/c.java, line(s) 99,105,165
c0/c.java, line(s) 148
c5/b.java, line(s) 89,96,109
c6/b.java, line(s) 28,38,15,48,58,68
ca/b.java, line(s) 36
com/batch/android/f0/a.java, line(s) 171,176,183,187,203,213
com/batch/android/f0/b.java, line(s) 33
com/batch/android/g0/s.java, line(s) 103,116,27,40,53,69,82,137,150,171,184
com/batch/android/messaging/g/c.java, line(s) 102
com/batch/android/messaging/g/f.java, line(s) 86,186,85,185
com/batch/android/messaging/g/h.java, line(s) 725,754,761,724,753,760,581,590
com/batch/android/messaging/view/i/b.java, line(s) 324
com/batch/android/messaging/view/k/b.java, line(s) 56,105,137,146,151,172,186,197,202,55,104,136,145,150,171,185,196,201
com/batch/android/messaging/view/l/b.java, line(s) 151
com/batch/android/messaging/view/l/c.java, line(s) 185,203
com/wdullaer/materialdatetimepicker/time/RadialPickerLayout.java, line(s) 257
com/wdullaer/materialdatetimepicker/time/c.java, line(s) 109,119
com/wdullaer/materialdatetimepicker/time/d.java, line(s) 140,149
d5/b.java, line(s) 83,73,95,112,65,72,82,94,111,66
d5/d0.java, line(s) 67,68
d7/b.java, line(s) 55,72
db/b.java, line(s) 683,731,960,776,990
db/d.java, line(s) 497,552,735
e7/c.java, line(s) 91,94,116,124,125
ea/c.java, line(s) 50
eb/a.java, line(s) 254,273,363,383,412
eb/b.java, line(s) 517
eb/c.java, line(s) 46,281
f/a.java, line(s) 100
f4/z.java, line(s) 16
f6/l.java, line(s) 181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199
f8/a.java, line(s) 14
g3/f.java, line(s) 35
ga/b.java, line(s) 34,37,47,50,60,64,93,97,109,113,135,139,164,167,180,183,193,196,218,221,231,234
ga/c.java, line(s) 25,27,31,41,43,81,85,95,99,109,113,123,127
ga/h.java, line(s) 47
h/g.java, line(s) 151,187,264
h8/f.java, line(s) 58
ha/a3.java, line(s) 65,75,80,85,92,95,136
ha/d4.java, line(s) 23
ha/g.java, line(s) 135,142
ha/g0.java, line(s) 532
ha/g3.java, line(s) 65
ha/h3.java, line(s) 56
ha/i.java, line(s) 44,76
ha/k.java, line(s) 388,79,94,340,399
ha/q0.java, line(s) 76,80,39
ha/r4.java, line(s) 101,107
ha/w.java, line(s) 58
ha/x.java, line(s) 99,205,225,228,328,357
ha/z.java, line(s) 833,343,346,349,458,661,679,725,737,764,782
hb/h.java, line(s) 132
hb/i.java, line(s) 331,416
i/d.java, line(s) 234
i3/a.java, line(s) 172
i4/t.java, line(s) 32
i9/b.java, line(s) 217,255,260,280,287,297,307
ia/b.java, line(s) 545
ia/e.java, line(s) 259
ia/n0.java, line(s) 1223,3274,5199,2999,4085
j0/a.java, line(s) 32
j1/u.java, line(s) 105,109,113,13,118
j3/b.java, line(s) 27,44,69
j3/d.java, line(s) 66,116,129,154,224,239,61,114,128,153,219,238,150,166,178,188,195
j3/e.java, line(s) 28,25,25
j3/i.java, line(s) 53,48
j3/j.java, line(s) 111,151,197,106,149,172,193,227,277,296,339,173,228,278,297,340,140,205
j3/s.java, line(s) 25
j3/u.java, line(s) 33,47,25,39
j3/v.java, line(s) 46,34,65
ja/c.java, line(s) 260
ja/e.java, line(s) 546
ja/f0.java, line(s) 1314,3512,4482,3003,3884
k0/c.java, line(s) 83
k3/i.java, line(s) 25
k4/i.java, line(s) 23
k5/d0.java, line(s) 15
k5/f.java, line(s) 39,66,27,28,65
l0/a.java, line(s) 165,170,177,181,197,207
l3/d.java, line(s) 38,44,50,33,56,62
l3/q.java, line(s) 30
l3/u.java, line(s) 129,149,169,181
la/a.java, line(s) 45,169,71,72,78,135,140,154,155,161,164,168,194,197,280,293
la/b.java, line(s) 32,39,44
la/d.java, line(s) 36
m0/a.java, line(s) 327,368,426,200,207,209,215,350,361,372,410,113,144,203,211,218,231,240,252,312,330
m0/b.java, line(s) 59,70,72,99,101,119,140,180,222,244,293,303,306,310,95,103,112,232,248,263,301
ma/c.java, line(s) 67
n4/c.java, line(s) 79,91
n9/e.java, line(s) 48,111
na/f.java, line(s) 40,45,49,323
o3/a.java, line(s) 33,38,21
oa/b.java, line(s) 42
oa/d.java, line(s) 107,169,260,321
org/telegram/SQLite/SQLiteCursor.java, line(s) 111,116
org/telegram/SQLite/SQLiteDatabase.java, line(s) 84,39
org/telegram/SQLite/SQLitePreparedStatement.java, line(s) 82,90
org/telegram/messenger/AndroidUtilities$LinkMovementMethodMy.java, line(s) 19
org/telegram/messenger/AndroidUtilities.java, line(s) 1310,1318,2265,2635,231,366,381,459,493,599,602,634,679,806,846,865,877,932,995,1274,1297,1333,1354,1365,1394,1403,1591,1595,1654,1664,1672,1804,1849,1912,1927,2214,2376,2385,2402,2651,2669,2950,3314,3393,3443,3455,3599
org/telegram/messenger/AnimatedFileDrawableStream.java, line(s) 122
org/telegram/messenger/ApplicationLoader.java, line(s) 218,294,320,330,341,390,413,477,498,80,117,156,182,196,241,265,278,310
org/telegram/messenger/ChatObject.java, line(s) 136,185,255,537,546,559,834,846,872,877,888,893
org/telegram/messenger/ChatThemeController.java, line(s) 64,117,137,169
org/telegram/messenger/ContactsController.java, line(s) 205,611,758,797,964,1077,1086,1112,1252,1272,1444,2036,2041,2154,318,346,359,466,470,479,1010,1505,1541,1836,1878,2178
org/telegram/messenger/ContactsRemoteViewsFactory.java, line(s) 149
org/telegram/messenger/ContactsSyncAdapterService.java, line(s) 44,30
org/telegram/messenger/DispatchQueue.java, line(s) 37,48,57,81
org/telegram/messenger/DownloadController.java, line(s) 150,165,170,249,295,370,391,811
org/telegram/messenger/Emoji.java, line(s) 416,423,485,497
org/telegram/messenger/EmuInputDevicesDetector.java, line(s) 55
org/telegram/messenger/FeedRemoteViewsFactory.java, line(s) 111
org/telegram/messenger/FileLoadOperation.java, line(s) 722,792,903,969,1363,1424,321,327,335,341,349,355,363,369,378,564,574,584,594,605,934,936,947,951,1100
org/telegram/messenger/FileLoader.java, line(s) 816,824,835,1191
org/telegram/messenger/FileLog.java, line(s) 48,58,68,206
org/telegram/messenger/FileRefController.java, line(s) 565
org/telegram/messenger/FileStreamLoadOperation.java, line(s) 44
org/telegram/messenger/FileUploadOperation.java, line(s) 152,190,120
org/telegram/messenger/FilesMigrationService.java, line(s) 295,202,206,243,248
org/telegram/messenger/FingerprintController.java, line(s) 33,58,81,87,102,118,127
org/telegram/messenger/GcmPushListenerService$1.java, line(s) 30,36,41,49,55,64
org/telegram/messenger/GcmPushListenerService$2.java, line(s) 30,36,41,49,55,64
org/telegram/messenger/GcmPushListenerService$3.java, line(s) 27,37,43,47
org/telegram/messenger/GcmPushListenerService.java, line(s) 300,427,435,54,62,66,68,82,109,365
org/telegram/messenger/GoogleVoiceClientService.java, line(s) 34
org/telegram/messenger/ImageLoader.java, line(s) 240,915,933,1017,1096,1104,1114,1224,1581,1686,1843,1959,1965,1996,2008
org/telegram/messenger/ImageReceiver.java, line(s) 462,527,581,834
org/telegram/messenger/ImportingService.java, line(s) 63,77
org/telegram/messenger/Jsoner.java, line(s) 460,487,803,832,2093,83,85,92,97,107,109,116,121,156,196,557,598,652,667,680,851,856,861,865,875,1886,1897,2070,2074,2138,2140,2143,2149,2153,2177,2181,2187,2191,2521,2523,2527,2612,2614,2618,2644,2646,2650,2704,2715,2738,2745,2748,2817,2954,2965,3049,3065,3072,3075,3102,3113,3143,3154,3176,3183,3186,3215,3223,3227,3234,3243,3247,3260,3282,3539,4281
org/telegram/messenger/KeepAliveJob.java, line(s) 21,27,40,65,77
org/telegram/messenger/LinkifyPort.java, line(s) 42
org/telegram/messenger/LocaleController.java, line(s) 1532,3070,356,361,414,479,509,525,544,583,600,667,724,734,772,805,897,906,937,993,1147,1153,1159,1170,1290,1393,1493,1599,1639
org/telegram/messenger/LocationController.java, line(s) 604,804,821,843,915,929,1185
org/telegram/messenger/MediaController$5.java, line(s) 67
org/telegram/messenger/MediaController$6.java, line(s) 21
org/telegram/messenger/MediaController$7.java, line(s) 30
org/telegram/messenger/MediaController$8.java, line(s) 23
org/telegram/messenger/MediaController$9.java, line(s) 30
org/telegram/messenger/MediaController$MediaLoader.java, line(s) 101,112,120,128,136,243
org/telegram/messenger/MediaController$StopMediaObserverRunnable.java, line(s) 25,33
org/telegram/messenger/MediaController$VideoConvertRunnable.java, line(s) 16
org/telegram/messenger/MediaController.java, line(s) 851,288,293,298,303,522,532,562,585,596,602,608,657,665,671,679,834,860,869,928,991,999,1011,1114,1123,1172,1274,1288,1361,1428,1497,1566,1610,1625,1650,1668,1818,2154,2300,2558,2569
org/telegram/messenger/MediaDataController.java, line(s) 3738,712,745,817,853,879,1001,1152,1229,1280,1307,1371,1457,1609,1647,1680,1708,1859,1942,2123,2158,2244,2433,2571,2763,2789,2826,2886,2926,2941,2955,3013,3046,3070,3103,3124,3204,3245,3268,3307,3533,5357,5626
org/telegram/messenger/MessageObject.java, line(s) 343,628,2290
org/telegram/messenger/MessagesController.java, line(s) 2298,2304,2310,2330,6783,7516,7629,7717,7725,7739,7902,8980,10098,10620,10873,10881,10990,11409,11421,11434,11454,11459,11466,11483,11498,11778,977,993,1021,1739,2215,2739,2759,2787,2813,4589,4604,6006,9007,9413,9446,9483,10125,10966,11009,11096,11800,11999,5142,6051
org/telegram/messenger/MessagesStorage.java, line(s) 3076,5529,6531,8107,8209,461,493,586,596,606,634,646,702,832,845,899,916,924,932,940,953,997,1065,1074,1117,1171,1174,1206,1210,1272,1291,1333,1379,1402,1460,1479,1606,1642,1718,1823,1837,1866,1882,1905,1929,2045,2435,2556,2684,2720,2760,2813,2856,2864,2873,2913,2948,2960,3069,3116,3140,3277,3286,3334,3343,3428,3482,3497,3629,3658,3725,3748,3756,3811,3845,3857,3870,3883,3923,3938,3950,3964,3984,4028,4044,4058,4086,4114,4144,4233,4295,4308,4355,4451,4474,4505,4528,4632,4664,4689,4841,4889,4921,5039,5147,5172,5296,5328,5378,5485,5506,6040,6092,6138,6162,6186,6210,6257,6458,6676,6717,6801,6827,6909,6926,7048,7057,7065,7146,7246,7251,7277,7291,7308,7329,7394,7438,7496,7587,7626,7643,7654,7679,7705,7720,7736,7753,7818,8004,8008,8236,8241,8251,8257,8629
org/telegram/messenger/MusicBrowserService.java, line(s) 120,242,267,417
org/telegram/messenger/MusicPlayerService.java, line(s) 250,528
org/telegram/messenger/NotificationBadge.java, line(s) 172,472
org/telegram/messenger/NotificationCenter.java, line(s) 1214
org/telegram/messenger/NotificationImageProvider.java, line(s) 100
org/telegram/messenger/NotificationsController.java, line(s) 297,312,494,516,599,1299,1420,1563,1578,155,211,216,223,269,294,309,318,341,404,469,491,499,524,610,619,648,652,661,691,695,1358,1371,1426,1442,1560,1575,1585,1646,1849,150
org/telegram/messenger/NotificationsDisabledReceiver.java, line(s) 31,35,46,55,68,82
org/telegram/messenger/OpenChatReceiver.java, line(s) 34
org/telegram/messenger/ScreenReceiver.java, line(s) 13,19
org/telegram/messenger/SecretChatHelper.java, line(s) 502,101,410,578,763,777,795,831,867,1085
org/telegram/messenger/SendMessagesHelper$LocationProvider.java, line(s) 30,107,112,121
org/telegram/messenger/SendMessagesHelper.java, line(s) 249,268,276,282,2648,2654,2669,2679,2693,577,635,1103,1169,1531,1641,2727,3593,3452
org/telegram/messenger/SharedConfig.java, line(s) 356,218,236,322,435,445,458,489,601
org/telegram/messenger/SmsReceiver.java, line(s) 51
org/telegram/messenger/SvgHelper.java, line(s) 1022,1061,1085,1098,1114,1233,1246,1261
org/telegram/messenger/UserConfig.java, line(s) 190
org/telegram/messenger/Utilities.java, line(s) 600,64,80,200,221,236,253,272,283,295,308,319,597,318,619
org/telegram/messenger/VideoEditedInfo.java, line(s) 349
org/telegram/messenger/VideoEncodingService.java, line(s) 66,95,45
org/telegram/messenger/XiaomiUtilities.java, line(s) 60
org/telegram/messenger/camera/CameraController.java, line(s) 272,293,400,419,758,133,138,308,370,426,451,461,473,502,505,523,543,556,569,574,580,585,593,622,648,660,703,842
org/telegram/messenger/camera/CameraSession.java, line(s) 202,218,223,240,321
org/telegram/messenger/camera/CameraView.java, line(s) 172,437,467,793,843,974,1142,1158,1488,180,188,197,204,216,230,237,248,262,280,319,329,578,583,591,701,710,720,728,762,907,1211
org/telegram/messenger/j5.java, line(s) 8
org/telegram/messenger/secretmedia/ExtendedDefaultDataSource.java, line(s) 143
org/telegram/messenger/support/JobIntentService.java, line(s) 126
org/telegram/messenger/video/AudioRecoder.java, line(s) 60
org/telegram/messenger/video/MediaCodecVideoConvertor.java, line(s) 49
org/telegram/messenger/video/TextureRenderer.java, line(s) 71,73
org/telegram/messenger/voip/AudioRecordJNI.java, line(s) 37,75,94,129,172,185,201,215,257,83,125,169,182,198
org/telegram/messenger/voip/AudioTrackJNI.java, line(s) 86,42,52,99,50,80
org/telegram/messenger/voip/Instance.java, line(s) 364
org/telegram/messenger/voip/JNIUtilities.java, line(s) 104
org/telegram/messenger/voip/NativeInstance.java, line(s) 80,135,304
org/telegram/messenger/voip/TelegramConnectionService.java, line(s) 25,52,42,69,18,80
org/telegram/messenger/voip/VideoCameraCapturer.java, line(s) 204
org/telegram/messenger/voip/VideoCapturerDevice.java, line(s) 286
org/telegram/messenger/voip/VoIPBaseService.java, line(s) 379,391,398,422,431,489,707,878,1241,1310,1788,1796,1802,247,281,328,470,481,499,513,561,638,676,769,859,1076,1297,1301,1664
org/telegram/messenger/voip/VoIPServerConfig.java, line(s) 35
org/telegram/messenger/voip/VoIPService.java, line(s) 569,581,588,610,619,837,898,971,989,1130,1442,1764,1995,2190,2355,2895,2991,2998,3005,3102,3111,3119,3498,3517,3537,3588,3919,3992,4168,4376,355,384,439,738,749,764,920,981,1013,1166,1290,1323,1340,1385,1436,1478,1500,1755,1964,2299,2353,2419,2443,2977,3011,3051,3771,3971,3976,4419,757,1296,1381,2667
org/telegram/tgnet/ConnectionsManager$d.java, line(s) 44,45,109,121,126
org/telegram/tgnet/ConnectionsManager$e.java, line(s) 24,25,66,67,84,40,99
org/telegram/tgnet/ConnectionsManager$f.java, line(s) 44,45,118,131,136,151
org/telegram/tgnet/ConnectionsManager$g.java, line(s) 42,101,114,119,134
org/telegram/tgnet/ConnectionsManager.java, line(s) 135,168,174,177,280,288,294,300,306,371,382,519,525,765,769,785,183,220,251,359,375,395,475,483,530,547,886
org/telegram/tgnet/NativeByteBuffer.java, line(s) 139,167,168,204,205,218,219,233,234,257,258,274,275,291,292,321,322,382,383,424,425,461,462,499,522,523,538,539,550,551,566,567,582,583,594,595
org/telegram/tgnet/c0.java, line(s) 59,60,74,75,91,100,109,118,134,135,150,151,165,166,194,228,229,249,250,273,274,291,292,312,313,350,351,379,403,404,419,420,456,457,493,494,513,514,529,530,541,542,571,572
org/telegram/tgnet/d0.java, line(s) 51
org/telegram/tgnet/ii.java, line(s) 34
org/telegram/tgnet/mi.java, line(s) 24
org/telegram/tgnet/rs0.java, line(s) 34
org/telegram/tgnet/vs0.java, line(s) 25
org/telegram/ui/ActionBar/ActionBarLayout.java, line(s) 823,827,1656
org/telegram/ui/ActionBar/ActionBarPopupWindow.java, line(s) 195,781,791
org/telegram/ui/ActionBar/DrawerLayoutContainer.java, line(s) 506
org/telegram/ui/ActionBar/b1.java, line(s) 144,238,282,1053
org/telegram/ui/ActionBar/k2.java, line(s) 4770,6141,1411,1430,1478,1676,2231,2407,2415,2603,2760,4513,5770,5857,5872,5953,5958,6183,6204,6434,6720
org/telegram/ui/ActionBar/l1.java, line(s) 295,421
org/telegram/ui/ActionBar/r0.java, line(s) 135,727
org/telegram/ui/ActionBar/v0.java, line(s) 369,384,498,512,527,539,588,656,736
org/telegram/ui/ActionBar/x2.java, line(s) 479
org/telegram/ui/ArticleViewer.java, line(s) 822,2520,2722,2745,2772,3978,8146,8680,9616,9648,9657,9788,9801
org/telegram/ui/BubbleActivity.java, line(s) 46,50,264
org/telegram/ui/Cells/c.java, line(s) 290,540
org/telegram/ui/Cells/d0.java, line(s) 2482,5093,5109
org/telegram/ui/Cells/e1.java, line(s) 370
org/telegram/ui/Cells/f1.java, line(s) 155
org/telegram/ui/Cells/g5.java, line(s) 323,324
org/telegram/ui/Cells/l.java, line(s) 303,312
org/telegram/ui/Cells/n0.java, line(s) 816
org/telegram/ui/Cells/o.java, line(s) 117
org/telegram/ui/Cells/t.java, line(s) 180,185
org/telegram/ui/Cells/u3.java, line(s) 123
org/telegram/ui/Cells/w0.java, line(s) 73
org/telegram/ui/Cells/y3.java, line(s) 435,459
org/telegram/ui/Components/AnimatedFileDrawable.java, line(s) 229,264
org/telegram/ui/Components/ChatActivityEnterView.java, line(s) 1266,3393,3459,3623,5258,6941,7580,8225,8609,8864
org/telegram/ui/Components/ChatAttachAlertPhotoLayout.java, line(s) 218,3167,3423,3756,3591
org/telegram/ui/Components/ClippingImageView.java, line(s) 176
org/telegram/ui/Components/Crop/b.java, line(s) 746,436,575
org/telegram/ui/Components/EditTextBoldCursor.java, line(s) 264,579,602,741,750
org/telegram/ui/Components/PipRoundVideoView.java, line(s) 412
org/telegram/ui/Components/RLottieDrawable.java, line(s) 209,343,821,995
org/telegram/ui/Components/RadioButton.java, line(s) 48,126
org/telegram/ui/Components/ThemeEditorView.java, line(s) 609,1371,1417,1426,1451
org/telegram/ui/Components/UndoView.java, line(s) 114
org/telegram/ui/Components/WebPlayerView.java, line(s) 1109,222,311,598,666,886,947,1004,1084,1619,1672,1826,1834,1842,1850,1858,1864,1913
org/telegram/ui/Components/a4.java, line(s) 1158,1249,1527,1594,1696,1929,1953,2145,2978,3047
org/telegram/ui/Components/aq.java, line(s) 66,248,255,264,271,281,295,302,391
org/telegram/ui/Components/b90.java, line(s) 2034
org/telegram/ui/Components/bh.java, line(s) 112,1730,1733,1834
org/telegram/ui/Components/bq.java, line(s) 737,738
org/telegram/ui/Components/by.java, line(s) 173,198
org/telegram/ui/Components/c40.java, line(s) 151
org/telegram/ui/Components/cr.java, line(s) 541
org/telegram/ui/Components/cz.java, line(s) 109
org/telegram/ui/Components/dn.java, line(s) 399,450,477,487
org/telegram/ui/Components/e7.java, line(s) 657,747,759
org/telegram/ui/Components/et.java, line(s) 639
org/telegram/ui/Components/f10.java, line(s) 1116,1123,1141,1618
org/telegram/ui/Components/f9.java, line(s) 687
org/telegram/ui/Components/fk.java, line(s) 331
org/telegram/ui/Components/fw.java, line(s) 593,668
org/telegram/ui/Components/gf.java, line(s) 630
org/telegram/ui/Components/hc0.java, line(s) 84,184
org/telegram/ui/Components/hu.java, line(s) 355,361,505,684,705,1076,1594,1877,1885,1900,1996,173,465,513,520,529,536,546,561,568,590,604,631,793,798,806,941,1146,1227,1236,1246,1254,1700,1731,1746,2451
org/telegram/ui/Components/if0.java, line(s) 144
org/telegram/ui/Components/ja0.java, line(s) 3711
org/telegram/ui/Components/jc0.java, line(s) 75
org/telegram/ui/Components/je0.java, line(s) 662,841,1716
org/telegram/ui/Components/kx.java, line(s) 517,535
org/telegram/ui/Components/l6.java, line(s) 277,281
org/telegram/ui/Components/l8.java, line(s) 562
org/telegram/ui/Components/li.java, line(s) 918,974,1187,1215,1368,1660,1787,1866,1884,1904,1913
org/telegram/ui/Components/mh0.java, line(s) 218,1588,1604
org/telegram/ui/Components/mo.java, line(s) 1194,1637,2071,5287
org/telegram/ui/Components/nb0.java, line(s) 198
org/telegram/ui/Components/on.java, line(s) 102,198
org/telegram/ui/Components/p30.java, line(s) 171
org/telegram/ui/Components/pj0.java, line(s) 91,210,241
org/telegram/ui/Components/q10.java, line(s) 108,240,546,821,833,847
org/telegram/ui/Components/q6.java, line(s) 92,387
org/telegram/ui/Components/qj0.java, line(s) 92,347,615
org/telegram/ui/Components/qz.java, line(s) 580
org/telegram/ui/Components/s5.java, line(s) 312
org/telegram/ui/Components/s50.java, line(s) 174,821,1086,1380
org/telegram/ui/Components/sq.java, line(s) 77,98,84,105
org/telegram/ui/Components/ss.java, line(s) 168
org/telegram/ui/Components/t10.java, line(s) 168,191,228,248
org/telegram/ui/Components/ut.java, line(s) 237,503,555,772,860
org/telegram/ui/Components/uw.java, line(s) 60
org/telegram/ui/Components/voip/g2.java, line(s) 339,649
org/telegram/ui/Components/voip/u1.java, line(s) 753,815,961,993
org/telegram/ui/Components/xf.java, line(s) 925
org/telegram/ui/Components/zj0.java, line(s) 47,78,118,121
org/telegram/ui/Components/zn.java, line(s) 137,304,338,351,408,446,530,545,559,889,915,996
org/telegram/ui/Components/zy.java, line(s) 238,257,651,723,1068,1120,1195,1442,1452
org/telegram/ui/ExternalActionActivity.java, line(s) 94,98,109,163,435
org/telegram/ui/GroupCreateActivity.java, line(s) 998
org/telegram/ui/InviteContactsActivity.java, line(s) 277,329,671,714
org/telegram/ui/LaunchActivity.java, line(s) 1083,1087,2081,2093,2286,2298,2302,2324,2336,3913,899,908,962,970,1294,1442,1598,1624,1759,1919,2770,2793,2798,2808,2913,2986,3071,3171,3216,3800,3896,4088,4095,4322,4336,264,270,631,641,1060,1138,1201,1845,1851,3133,3138,4384
org/telegram/ui/PhotoViewer.java, line(s) 5178,8237,8245,1828,4037,4658,4680,5303,5316,5801,5809,5922,6900,6962,7464,7989,8276,8286,8468,8556,8585,8788,8825,9310,9974,10318,10354,10526,10582,10628,11522,11535,11713,11769
org/telegram/ui/PopupNotificationActivity.java, line(s) 634,732
org/telegram/ui/ProfileActivity.java, line(s) 823,1424,2439,5282,5786,5947,6446,6499,6536,6650,8185
org/telegram/ui/SecretMediaViewer.java, line(s) 190,239,660,769,855
org/telegram/ui/ShareActivity.java, line(s) 80,96
org/telegram/ui/ThemeActivity.java, line(s) 1447,1452,1518,1530
org/telegram/ui/VoIPPermissionActivity.java, line(s) 32
org/telegram/ui/bk0.java, line(s) 1032
org/telegram/ui/c5.java, line(s) 478,492,1222,1230,1374,1599
org/telegram/ui/co.java, line(s) 643,717
org/telegram/ui/e30.java, line(s) 121
org/telegram/ui/e8.java, line(s) 811,1054,1066
org/telegram/ui/g40.java, line(s) 441,466
org/telegram/ui/gr.java, line(s) 604,629,653,664,734,772,845
org/telegram/ui/hg1.java, line(s) 1243,1364
org/telegram/ui/ie1.java, line(s) 164,185,400,411,635,651
org/telegram/ui/iq.java, line(s) 77
org/telegram/ui/j.java, line(s) 595,648,1124
org/telegram/ui/ji1.java, line(s) 212,1568,1582
org/telegram/ui/jr.java, line(s) 221,346,438
org/telegram/ui/k2.java, line(s) 308,362,551,681
org/telegram/ui/k6.java, line(s) 120,141,179,193
org/telegram/ui/l4.java, line(s) 458,469,1182
org/telegram/ui/m30.java, line(s) 291,345,352,361,368,379,393,400
org/telegram/ui/mt0.java, line(s) 749,500,1029
org/telegram/ui/na0.java, line(s) 338,495,1070,1141,1185,1214,1285,1309,1380,1459,2047,2079,2261,2439,2447,2491,2519,2528
org/telegram/ui/nj0.java, line(s) 77,422
org/telegram/ui/o00.java, line(s) 7010,7165
org/telegram/ui/o20.java, line(s) 1018
org/telegram/ui/ox.java, line(s) 1403
org/telegram/ui/p81.java, line(s) 404
org/telegram/ui/q01.java, line(s) 508,756
org/telegram/ui/qb1.java, line(s) 220,433
org/telegram/ui/rh.java, line(s) 3994,4147,4176,4204,4233,4264,4308,4337,8111,8121,8136,10458,12744,12778,16296,16323,2362,3007,4013,4164,4193,4221,4250,4288,4325,4354,7470,8392,8523,9368,11144,11583,12028,12268,13830,15355,17026,18157,19862,20109,20781,20871,4894,5116,9917,9931,9935,19586,19590,20206,20451
org/telegram/ui/rj1.java, line(s) 556,628,1517
org/telegram/ui/rk0.java, line(s) 297
org/telegram/ui/s61.java, line(s) 199
org/telegram/ui/sd1.java, line(s) 3302
org/telegram/ui/sx.java, line(s) 263
org/telegram/ui/t20.java, line(s) 219
org/telegram/ui/tk1.java, line(s) 193,126,138,324,474
org/telegram/ui/tools/activty/DeleteContactActivity.java, line(s) 956
org/telegram/ui/tools/activty/PlusSettingsActivity.java, line(s) 437,1170
org/telegram/ui/tools/activty/d.java, line(s) 74,455,588,689
org/telegram/ui/tools/dex_tv/a.java, line(s) 15
org/telegram/ui/tools/dex_tv/b2.java, line(s) 175,315
org/telegram/ui/tools/dex_tv/c1.java, line(s) 126,426
org/telegram/ui/tools/dex_tv/d1.java, line(s) 67,311,1058,1066,1075,986
org/telegram/ui/tools/dex_tv/d2.java, line(s) 160
org/telegram/ui/tools/dex_tv/d3.java, line(s) 699,191,200,209,730
org/telegram/ui/tools/dex_tv/e1.java, line(s) 199
org/telegram/ui/tools/dex_tv/g0.java, line(s) 238
org/telegram/ui/tools/dex_tv/h.java, line(s) 551
org/telegram/ui/tools/dex_tv/h0.java, line(s) 25
org/telegram/ui/tools/dex_tv/h2.java, line(s) 228,370
org/telegram/ui/tools/dex_tv/j.java, line(s) 372,375,265,278,289,296,327,429,439,447
org/telegram/ui/tools/dex_tv/l0.java, line(s) 43
org/telegram/ui/tools/dex_tv/n0.java, line(s) 29
org/telegram/ui/tools/dex_tv/o1.java, line(s) 268,546
org/telegram/ui/tools/dex_tv/q.java, line(s) 57
org/telegram/ui/tools/dex_tv/r.java, line(s) 45
org/telegram/ui/tools/dex_tv/r1.java, line(s) 622,741,778,784
org/telegram/ui/tools/dex_tv/t0.java, line(s) 56
org/telegram/ui/tools/dex_tv/t2.java, line(s) 180
org/telegram/ui/tools/dex_tv/v.java, line(s) 419,562
org/telegram/ui/tools/dex_tv/w1.java, line(s) 128,173,185,192
org/telegram/ui/tools/dex_tv/z.java, line(s) 94
org/telegram/ui/tools/p/helper/a.java, line(s) 97
org/telegram/ui/tools/p/service/a.java, line(s) 183,199,356
org/telegram/ui/tools/p/utlis/a.java, line(s) 67
org/telegram/ui/tools/service/DexBro.java, line(s) 74,88,93,105,107,127,145,151,160,174,191,195,201,207
org/telegram/ui/tq.java, line(s) 143,372,733,770,871,1027,1589,279
org/telegram/ui/tv.java, line(s) 199
org/telegram/ui/u4.java, line(s) 108,119
org/telegram/ui/uu.java, line(s) 382,1581,4583,6071,6855,1675,2953,2955,2962,2968,3014,3016,3023,3029,3124,3247,3253,5365,7389,7393,7405
org/telegram/ui/w91.java, line(s) 241,502,590,664
org/telegram/ui/wk.java, line(s) 400
org/telegram/ui/wz0.java, line(s) 724
org/telegram/ui/xl0.java, line(s) 621,850
org/telegram/ui/xo0.java, line(s) 807,821,3387,3784,4229,4516,5088,5834,6025,6064,6373
org/telegram/ui/xs0.java, line(s) 537,1950,2070,2229,2811,2931,2938,3276,3285,3309
org/telegram/ui/xt0.java, line(s) 198,203
org/telegram/ui/xw.java, line(s) 775,911
org/telegram/ui/y1.java, line(s) 22
org/telegram/ui/y6.java, line(s) 565,579,1314,1323,1332,1341,1350,1359,1368,2840
org/telegram/ui/yb0.java, line(s) 1382,578,1451,1581,1602,4125,5179,5195,5966,6850,7196,6795
org/telegram/ui/yh0.java, line(s) 552
org/telegram/ui/yk0.java, line(s) 685
org/telegram/ui/yo.java, line(s) 1712
org/webrtc/AndroidVideoDecoder.java, line(s) 125
org/webrtc/EglRenderer.java, line(s) 157,458
org/webrtc/GlGenericDrawer.java, line(s) 187
org/webrtc/GlShader.java, line(s) 106
org/webrtc/MediaCodecUtils.java, line(s) 102
org/webrtc/ScreenCapturerAndroid.java, line(s) 44,145
org/webrtc/TextureBufferImpl.java, line(s) 186
org/webrtc/YuvConverter.java, line(s) 116,142
org/webrtc/voiceengine/WebRtcAudioRecord.java, line(s) 89,406,465
p9/a.java, line(s) 22
pa/a.java, line(s) 276,294,901
q1/a.java, line(s) 100
q3/a.java, line(s) 45,53
q4/t.java, line(s) 59,29
q9/b.java, line(s) 106,122,135
qa/b$b.java, line(s) 23,24
r0/a.java, line(s) 99,418,427
r0/b.java, line(s) 60,191
r2/m0.java, line(s) 10,16
r3/h.java, line(s) 18
r3/m.java, line(s) 87
r3/q.java, line(s) 18,17
r3/r.java, line(s) 46,49,81,101,124,133,179,191
r9/i.java, line(s) 437
r9/n.java, line(s) 564,589,850
r9/n0.java, line(s) 288,395,448,456
r9/n1.java, line(s) 100,308,430
r9/p0.java, line(s) 473
r9/x1.java, line(s) 163,192,225
ra/h0.java, line(s) 1096,3048,3393,3475,736,762,784,3498,4144,4242,4314,4628,4729,4757
ra/v1.java, line(s) 1883,1952,2021,2819,3009
s/b.java, line(s) 66
s/f.java, line(s) 183
s0/c.java, line(s) 35,38,50,28,42
t/c.java, line(s) 409,414
t/e.java, line(s) 84
t/f.java, line(s) 41,76
t/g.java, line(s) 56,114
t/j.java, line(s) 96,99
t/k.java, line(s) 97
u/a.java, line(s) 63,72,130,140
u/e.java, line(s) 36,68
u3/i.java, line(s) 25
ua/a.java, line(s) 15,20
v0/e.java, line(s) 24,26,35,37,46,48,57,59,68,70
v9/b0.java, line(s) 29,37,75,97
v9/d0.java, line(s) 24,46,87
v9/i0.java, line(s) 12
v9/v.java, line(s) 177,184,193,200,210,224,231,327
va/d.java, line(s) 20
va/g.java, line(s) 67,74,270
w4/a.java, line(s) 79,88,104,108
wa/c.java, line(s) 120
x1/e.java, line(s) 36,65,72,75,92,97,102,107,112
x3/b.java, line(s) 12
x3/d.java, line(s) 12
x3/f.java, line(s) 12
x3/h.java, line(s) 12
x4/a.java, line(s) 107,82
y/i.java, line(s) 23
z4/c.java, line(s) 10,17,30,37,9,16,24,27,41,42,48,49
z5/i.java, line(s) 8,14,17

信息 此应用程序将数据复制到剪贴板。敏感数据不应复制到剪贴板,因为其他应用程序可以访问它

此应用程序将数据复制到剪贴板。敏感数据不应复制到剪贴板,因为其他应用程序可以访问它
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x04b-Mobile-App-Security-Testing.md#clipboard

Files:
aa/b.java, line(s) 4,46
aa/p0.java, line(s) 11,1904
ba/f.java, line(s) 5,46
db/b.java, line(s) 5,957
db/d.java, line(s) 5,732
fb/g.java, line(s) 6,318
org/telegram/messenger/AndroidUtilities.java, line(s) 12,379
org/telegram/ui/Cells/g5.java, line(s) 8,1791
org/telegram/ui/Components/ChatActivityEnterView.java, line(s) 12,2144
org/telegram/ui/Components/b90.java, line(s) 11,2018
org/telegram/ui/Components/kx.java, line(s) 6,514
org/telegram/ui/Components/mh0.java, line(s) 8,389
org/telegram/ui/Components/nv.java, line(s) 13,800
org/telegram/ui/Components/qz.java, line(s) 8,575
org/telegram/ui/Components/zn.java, line(s) 10,887
org/telegram/ui/ProfileActivity.java, line(s) 11,6444,6493
org/telegram/ui/b91.java, line(s) 5,359
org/telegram/ui/ie1.java, line(s) 5,180
org/telegram/ui/k6.java, line(s) 4,136
org/telegram/ui/qb1.java, line(s) 6,429
org/telegram/ui/rh.java, line(s) 15,11139
org/telegram/ui/t20.java, line(s) 4,190
org/telegram/ui/wz0.java, line(s) 4,108
org/telegram/ui/yh0.java, line(s) 4,548
pa/c.java, line(s) 388,388

信息 此应用侦听剪贴板更改。一些恶意软件也会监听剪贴板更改

此应用侦听剪贴板更改。一些恶意软件也会监听剪贴板更改
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x04b-Mobile-App-Security-Testing.md#clipboard

Files:
org/telegram/ui/m71.java, line(s) 50,212,231,5

安全 此应用程序可能具有Root检测功能

此应用程序可能具有Root检测功能
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05j-Testing-Resiliency-Against-Reverse-Engineering.md#testing-root-detection-mstg-resilience-1

Files:
f6/g.java, line(s) 307,307,308
k5/t.java, line(s) 26

安全 此应用程序使用SSL Pinning 来检测或防止安全通信通道中的MITM攻击

此应用程序使用SSL Pinning 来检测或防止安全通信通道中的MITM攻击
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05g-Testing-Network-Communication.md#testing-custom-certificate-stores-and-certificate-pinning-mstg-network-4

Files:
s8/w.java, line(s) 287,276,286,285,285

安全 Firebase远程配置已禁用

Firebase远程配置URL ( https://firebaseremoteconfig.googleapis.com/v1/projects/718227292047/namespaces/firebase:fetch?key=AIzaSyDgfHzB0cppfDz8bCBJ4_vXxEqucxnKFz8 ) 已禁用。响应内容如下所示:

{
    "state": "NO_TEMPLATE"
}

安全评分: ( Tele Tools 8.7.4)