安全分数
安全分数 46/100
风险评级
等级
- A
- B
- C
- F
严重性分布 (%)
隐私风险
5
用户/设备跟踪器
调研结果
高危
8
中危
42
信息
3
安全
3
关注
0
高危 Activity (org.telegram.ui.LaunchActivity) 的启动模式不是standard模式
Activity 不应将启动模式属性设置为 "singleTask/singleInstance",因为这会使其成为根 Activity,并可能导致其他应用程序读取调用 Intent 的内容。因此,当 Intent 包含敏感信息时,需要使用 "standard" 启动模式属性。
高危 Activity (org.telegram.ui.PopupNotificationActivity) 的启动模式不是standard模式
Activity 不应将启动模式属性设置为 "singleTask/singleInstance",因为这会使其成为根 Activity,并可能导致其他应用程序读取调用 Intent 的内容。因此,当 Intent 包含敏感信息时,需要使用 "standard" 启动模式属性。
高危 Activity (com.google.android.play.core.missingsplits.PlayCoreMissingSplitsActivity) 的启动模式不是standard模式
Activity 不应将启动模式属性设置为 "singleTask/singleInstance",因为这会使其成为根 Activity,并可能导致其他应用程序读取调用 Intent 的内容。因此,当 Intent 包含敏感信息时,需要使用 "standard" 启动模式属性。
高危 应用程序使用带PKCS5/PKCS7填充的加密模式CBC。此配置容易受到填充oracle攻击。
应用程序使用带PKCS5/PKCS7填充的加密模式CBC。此配置容易受到填充oracle攻击。 https://github.com/OWASP/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#identifying-insecure-andor-deprecated-cryptographic-algorithms-mstg-crypto-4 Files: org/telegram/ui/tools/dex_tv/l2.java, line(s) 28 org/telegram/ui/tools/p/helper/a.java, line(s) 124 org/telegram/ui/tools/p/helper/b.java, line(s) 11
高危 如果一个应用程序使用WebView.loadDataWithBaseURL方法来加载一个网页到WebView,那么这个应用程序可能会遭受跨站脚本攻击
如果一个应用程序使用WebView.loadDataWithBaseURL方法来加载一个网页到WebView,那么这个应用程序可能会遭受跨站脚本攻击 https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05h-Testing-Platform-Interaction.md#static-analysis-7 Files: org/telegram/ui/ArticleViewer.java, line(s) 2751,63,64 org/telegram/ui/Components/t10.java, line(s) 237,241,16,17 org/telegram/ui/Components/zn.java, line(s) 539,543,35,36
高危 该文件是World Readable。任何应用程序都可以读取文件
该文件是World Readable。任何应用程序都可以读取文件 https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#testing-local-storage-for-sensitive-data-mstg-storage-1-and-mstg-storage-2 Files: db/d.java, line(s) 204
高危 已启用远程WebView调试
已启用远程WebView调试 https://github.com/OWASP/owasp-mstg/blob/master/Document/0x04c-Tampering-and-Reverse-Engineering.md#debugging-and-tracing Files: org/telegram/ui/ProfileActivity.java, line(s) 707,51
高危 应用程序包含隐私跟踪程序
此应用程序有多个5隐私跟踪程序。跟踪器可以跟踪设备或用户,是终端用户的隐私问题。
中危 应用程序已启用明文网络流量
[android:usesCleartextTraffic=true] 应用程序打算使用明文网络流量,例如明文HTTP,FTP协议,DownloadManager和MediaPlayer。针对API级别27或更低的应用程序,默认值为“true”。针对API级别28或更高的应用程序,默认值为“false”。避免使用明文流量的主要原因是缺乏机密性,真实性和防篡改保护;网络攻击者可以窃听传输的数据,并且可以在不被检测到的情况下修改它。
中危 Activity-Alias (org.telegram.ui.CallsActivity) 受权限保护, 但是应该检查权限的保护级别。
Permission: android.permission.CALL_PHONE [android:exported=true] 发现一个 Activity-Alias被共享给了设备上的其他应用程序,因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此,应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险,一个恶意应用程序可以请求并获得这个权限,并与该组件交互。如果它被设置为签名,只有使用相同证书签名的应用程序才能获得这个权限。
中危 Activity (org.telegram.ui.ShareActivity) 未被保护。
存在一个intent-filter。 发现 Activity与设备上的其他应用程序共享,因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Activity是显式导出的。
中危 Activity (org.telegram.ui.ExternalActionActivity) 未被保护。
存在一个intent-filter。 发现 Activity与设备上的其他应用程序共享,因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Activity是显式导出的。
中危 Activity (org.telegram.ui.ChatsWidgetConfigActivity) 未被保护。
存在一个intent-filter。 发现 Activity与设备上的其他应用程序共享,因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Activity是显式导出的。
中危 Activity (org.telegram.ui.ContactsWidgetConfigActivity) 未被保护。
存在一个intent-filter。 发现 Activity与设备上的其他应用程序共享,因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Activity是显式导出的。
中危 Activity (org.telegram.messenger.OpenChatReceiver) 未被保护。
[android:exported=true] 发现 Activity与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。
中危 Activity (org.telegram.messenger.GoogleVoiceClientActivity) 未被保护。
[android:exported=true] 发现 Activity与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。
中危 Activity设置了TaskAffinity属性
(org.telegram.ui.VoIPPermissionActivity) 如果设置了 taskAffinity,其他应用程序可能会读取发送到属于另一个任务的 Activity 的 Intent。为了防止其他应用程序读取发送或接收的 Intent 中的敏感信息,请始终使用默认设置,将 affinity 保持为包名
中危 Activity设置了TaskAffinity属性
(org.telegram.ui.VoIPFeedbackActivity) 如果设置了 taskAffinity,其他应用程序可能会读取发送到属于另一个任务的 Activity 的 Intent。为了防止其他应用程序读取发送或接收的 Intent 中的敏感信息,请始终使用默认设置,将 affinity 保持为包名
中危 Broadcast Receiver (org.telegram.messenger.SmsReceiver) 未被保护。
[android:exported=true] 发现 Broadcast Receiver与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。
中危 Broadcast Receiver (org.telegram.messenger.CallReceiver) 未被保护。
存在一个intent-filter。 发现 Broadcast Receiver与设备上的其他应用程序共享,因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Broadcast Receiver是显式导出的。
中危 Service (org.telegram.messenger.AuthenticatorService) 未被保护。
[android:exported=true] 发现 Service与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。
中危 Service (org.telegram.messenger.ContactsSyncAdapterService) 未被保护。
[android:exported=true] 发现 Service与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。
中危 Service (org.telegram.messenger.MusicPlayerService) 未被保护。
[android:exported=true] 发现 Service与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。
中危 Service (org.telegram.messenger.MusicBrowserService) 未被保护。
[android:exported=true] 发现 Service与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。
中危 Service (org.telegram.messenger.voip.TelegramConnectionService) 受权限保护, 但是应该检查权限的保护级别。
Permission: android.permission.BIND_TELECOM_CONNECTION_SERVICE [android:exported=true] 发现一个 Service被共享给了设备上的其他应用程序,因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此,应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险,一个恶意应用程序可以请求并获得这个权限,并与该组件交互。如果它被设置为签名,只有使用相同证书签名的应用程序才能获得这个权限。
中危 Broadcast Receiver (org.telegram.messenger.MusicPlayerReceiver) 未被保护。
存在一个intent-filter。 发现 Broadcast Receiver与设备上的其他应用程序共享,因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Broadcast Receiver是显式导出的。
中危 Broadcast Receiver (org.telegram.messenger.AppStartReceiver) 未被保护。
存在一个intent-filter。 发现 Broadcast Receiver与设备上的其他应用程序共享,因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Broadcast Receiver是显式导出的。
中危 Broadcast Receiver (org.telegram.messenger.RefererReceiver) 受权限保护, 但是应该检查权限的保护级别。
Permission: android.permission.INSTALL_PACKAGES [android:exported=true] 发现一个 Broadcast Receiver被共享给了设备上的其他应用程序,因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此,应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险,一个恶意应用程序可以请求并获得这个权限,并与该组件交互。如果它被设置为签名,只有使用相同证书签名的应用程序才能获得这个权限。
中危 Content Provider (org.telegram.messenger.voip.CallNotificationSoundProvider) 未被保护。
[android:exported=true] 发现 Content Provider与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。
中危 Service (org.telegram.messenger.GcmPushListenerService) 未被保护。
存在一个intent-filter。 发现 Service与设备上的其他应用程序共享,因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Service是显式导出的。
中危 Service (org.telegram.ui.tools.p.service.PServices) 未被保护。
[android:exported=true] 发现 Service与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。
中危 Service (org.telegram.ui.tools.p.service.SmartAdsService) 未被保护。
[android:exported=true] 发现 Service与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。
中危 Activity (org.telegram.ui.tools.p.utlis.DialogShowAdsActivity) 未被保护。
[android:exported=true] 发现 Activity与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。
中危 Activity (org.telegram.ui.tools.p.utlis.PhotoShowAdsActivity) 未被保护。
[android:exported=true] 发现 Activity与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。
中危 Service (androidx.sharetarget.ChooserTargetServiceCompat) 受权限保护, 但是应该检查权限的保护级别。
Permission: android.permission.BIND_CHOOSER_TARGET_SERVICE [android:exported=true] 发现一个 Service被共享给了设备上的其他应用程序,因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此,应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险,一个恶意应用程序可以请求并获得这个权限,并与该组件交互。如果它被设置为签名,只有使用相同证书签名的应用程序才能获得这个权限。
中危 Broadcast Receiver (com.google.firebase.iid.FirebaseInstanceIdReceiver) 受权限保护, 但是应该检查权限的保护级别。
Permission: com.google.android.c2dm.permission.SEND [android:exported=true] 发现一个 Broadcast Receiver被共享给了设备上的其他应用程序,因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此,应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险,一个恶意应用程序可以请求并获得这个权限,并与该组件交互。如果它被设置为签名,只有使用相同证书签名的应用程序才能获得这个权限。
中危 Broadcast Receiver (com.batch.android.BatchPushMessageReceiver) 受权限保护, 但是应该检查权限的保护级别。
Permission: com.google.android.c2dm.permission.SEND [android:exported=true] 发现一个 Broadcast Receiver被共享给了设备上的其他应用程序,因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此,应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险,一个恶意应用程序可以请求并获得这个权限,并与该组件交互。如果它被设置为签名,只有使用相同证书签名的应用程序才能获得这个权限。
中危 Service (com.google.android.gms.auth.api.signin.RevocationBoundService) 受权限保护, 但是应该检查权限的保护级别。
Permission: com.google.android.gms.auth.api.signin.permission.REVOCATION_NOTIFICATION [android:exported=true] 发现一个 Service被共享给了设备上的其他应用程序,因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此,应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险,一个恶意应用程序可以请求并获得这个权限,并与该组件交互。如果它被设置为签名,只有使用相同证书签名的应用程序才能获得这个权限。
中危 Service (androidx.work.impl.background.systemjob.SystemJobService) 受权限保护, 但是应该检查权限的保护级别。
Permission: android.permission.BIND_JOB_SERVICE [android:exported=true] 发现一个 Service被共享给了设备上的其他应用程序,因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此,应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险,一个恶意应用程序可以请求并获得这个权限,并与该组件交互。如果它被设置为签名,只有使用相同证书签名的应用程序才能获得这个权限。
中危 Service (com.google.android.play.core.assetpacks.AssetPackExtractionService) 未被保护。
[android:exported=true] 发现 Service与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。
中危 SHA-1是已知存在哈希冲突的弱哈希
SHA-1是已知存在哈希冲突的弱哈希 https://github.com/OWASP/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#identifying-insecure-andor-deprecated-cryptographic-algorithms-mstg-crypto-4 Files: com/batch/android/g0/b.java, line(s) 22 d7/b.java, line(s) 51 org/telegram/messenger/Utilities.java, line(s) 194,217 org/telegram/ui/xo0.java, line(s) 5830 q1/j.java, line(s) 68
中危 应用程序创建临时文件。敏感信息永远不应该被写进临时文件
应用程序创建临时文件。敏感信息永远不应该被写进临时文件 Files: d7/c.java, line(s) 66 m0/b.java, line(s) 118 v9/d0.java, line(s) 22
中危 应用程序使用不安全的随机数生成器
应用程序使用不安全的随机数生成器 https://github.com/OWASP/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#weak-random-number-generators Files: a4/b.java, line(s) 4 cb/a.java, line(s) 5 com/batch/android/g0/n0.java, line(s) 7 j$/util/concurrent/ThreadLocalRandom.java, line(s) 17 l1/b.java, line(s) 3 na/f.java, line(s) 7 org/telegram/messenger/GcmPushListenerService$1.java, line(s) 6 org/telegram/messenger/GcmPushListenerService$2.java, line(s) 6 org/telegram/messenger/GcmPushListenerService$3.java, line(s) 6 org/telegram/messenger/Jsoner.java, line(s) 34 org/telegram/messenger/Utilities.java, line(s) 34 org/telegram/ui/Components/g6.java, line(s) 7 org/telegram/ui/Components/i5.java, line(s) 6 org/telegram/ui/Components/kl.java, line(s) 7 org/telegram/ui/Components/pq.java, line(s) 12 org/telegram/ui/Components/q90.java, line(s) 14 org/telegram/ui/Components/ts.java, line(s) 17 org/telegram/ui/Components/u5.java, line(s) 11 org/telegram/ui/Components/vw.java, line(s) 6 org/telegram/ui/d71.java, line(s) 22 org/telegram/ui/tools/p/helper/a.java, line(s) 8 org/telegram/ui/tools/p/service/PServices.java, line(s) 8 org/telegram/ui/tv.java, line(s) 10 ra/h0.java, line(s) 19 ra/v1.java, line(s) 12
中危 应用程序使用SQLite数据库并执行原始SQL查询。原始SQL查询中不受信任的用户输入可能会导致SQL注入。敏感信息也应加密并写入数据库
应用程序使用SQLite数据库并执行原始SQL查询。原始SQL查询中不受信任的用户输入可能会导致SQL注入。敏感信息也应加密并写入数据库 https://github.com/OWASP/owasp-mstg/blob/master/Document/0x04h-Testing-Code-Quality.md#injection-flaws-mstg-arch-2-and-mstg-platform-2 Files: com/batch/android/l0/c.java, line(s) 4,5,51,52,53 com/batch/android/l0/d.java, line(s) 6,7,294,313,346 com/batch/android/n0/b.java, line(s) 5,6,38 com/batch/android/n0/c.java, line(s) 6,55,75,120 com/batch/android/t0/a.java, line(s) 4,5,41,47,50 com/batch/android/u0/b.java, line(s) 7,8,9,182,240,419 com/batch/android/u0/f.java, line(s) 4,5,37,38 f2/l0.java, line(s) 7,8,68,95,107,111,182,313,339,514 f2/s0.java, line(s) 4,5,109 ga/b.java, line(s) 5,6,7,67,70,84,116,119,142,145,158 ga/c.java, line(s) 5,6,7,45,48 hb/b.java, line(s) 6,7,103 t0/a.java, line(s) 4,5,6,7,59 ta/a.java, line(s) 4,5,14,15,17,22,23,29,30,31 ta/b.java, line(s) 4,5,14,18 ta/c.java, line(s) 6,7,27
中危 文件可能包含硬编码的敏感信息,如用户名、密码、密钥等
文件可能包含硬编码的敏感信息,如用户名、密码、密钥等 https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#checking-memory-for-sensitive-data-mstg-storage-10 Files: com/batch/android/Batch.java, line(s) 286,284,285,287 com/batch/android/BatchActionActivity.java, line(s) 12 com/batch/android/BatchMessage.java, line(s) 10 com/batch/android/BatchPushJobService.java, line(s) 11 h6/c.java, line(s) 81 org/telegram/messenger/Jsoner.java, line(s) 60,61,63,64 org/telegram/messenger/MediaDataController.java, line(s) 53,59,58 org/telegram/messenger/voip/Instance.java, line(s) 241,173
中危 应用程序可以读取/写入外部存储器,任何应用程序都可以读取写入外部存储器的数据
应用程序可以读取/写入外部存储器,任何应用程序都可以读取写入外部存储器的数据 https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#external-storage Files: org/telegram/messenger/AndroidUtilities.java, line(s) 1272,1306,1313,1363,1462,1619 org/telegram/messenger/ApplicationLoader.java, line(s) 444,449,549 org/telegram/messenger/EmuDetector.java, line(s) 98 org/telegram/messenger/FileLog.java, line(s) 31,117,136,220 org/telegram/messenger/FilesMigrationService.java, line(s) 288,151,272 org/telegram/messenger/MediaController$MediaLoader.java, line(s) 181 org/telegram/messenger/SharedConfig.java, line(s) 456,467 org/telegram/messenger/Utilities.java, line(s) 166,533,562,601 org/telegram/messenger/voip/VoIPController.java, line(s) 89 org/telegram/ui/Components/bh.java, line(s) 1667,1667,1667,1670,1692 org/telegram/ui/Components/voip/u1.java, line(s) 164,1001 org/telegram/ui/ProfileActivity.java, line(s) 6667 org/telegram/ui/tools/activty/d.java, line(s) 532,532,532,539,570
中危 不安全的Web视图实现。可能存在WebView任意代码执行漏洞
不安全的Web视图实现。可能存在WebView任意代码执行漏洞 https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05h-Testing-Platform-Interaction.md#testing-javascript-execution-in-webviews-mstg-platform-5 Files: org/telegram/ui/ArticleViewer.java, line(s) 2690,2684 org/telegram/ui/Components/WebPlayerView.java, line(s) 1143,1150 org/telegram/ui/Components/e7.java, line(s) 703,688 org/telegram/ui/Components/t10.java, line(s) 216,137 org/telegram/ui/Components/zn.java, line(s) 518,677 org/telegram/ui/tk1.java, line(s) 450,436
中危 MD5是已知存在哈希冲突的弱哈希
MD5是已知存在哈希冲突的弱哈希 https://github.com/OWASP/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#identifying-insecure-andor-deprecated-cryptographic-algorithms-mstg-crypto-4 Files: com/batch/android/g0/n.java, line(s) 39,28 org/telegram/messenger/MessagesController.java, line(s) 3143 org/telegram/messenger/Utilities.java, line(s) 73
中危 IP地址泄露
IP地址泄露 Files: org/telegram/messenger/EmuDetector.java, line(s) 18
中危 此应用可能包含硬编码机密信息
从应用程序中识别出以下机密确保这些不是机密或私人信息 AdMob广告平台的=> "com.google.android.gms.ads.APPLICATION_ID" : "ca-app-pub-3940256099942544~3347511713" "CancelPasswordResetNo" : "NEIN" "UseProxySecret" : "Secret" "CancelPasswordResetNo" : "NO" "CancelPasswordResetYes" : "HA" "PasswordCode" : "Code" "RestorePasswordNoEmailTitle" : "Spiacenti" "TypePrivateGroup" : "Privat" "UseProxySecret" : "Yashirin" "ChannelTypePrivate" : "Private" "TypePrivate" : "Prywatny" "LoginPassword" : "Parol" "PasswordOff" : "Apagado" "PasscodePassword" : "Senha" "TypePrivateGroup" : "Xususiy" "UseProxySecret" : "Sekret" "ChannelTypePrivate" : "Xususiy" "PasswordOff" : "No" "CheckPasswordPerfect" : "Perfect!" "PasscodePassword" : "Parola" "PaymentPasswordTitle" : "Password" "PasscodePassword" : "Sandi" "ReportSpamUser" : "BLOQUEAR" "BotToken" : "Gettone" "TypePrivate" : "Xususiy" "TypePrivate" : "Gizli" "ReportSpamUser" : "BLOKIR" "BotToken" : "Jeton" "CancelPasswordResetNo" : "YOQ" "CancelPasswordResetYes" : "SIM" "CancelPasswordResetNo" : "NIE" "RestorePasswordNoEmailTitle" : "Maaf" "NotificationHiddenChatUserName" : "Utilisateur" "YourPasswordSuccess" : "Success!" "UseProxySecret" : "Gizli" "ChannelTypePrivate" : "Privado" "Username" : "Nutzername" "RestorePasswordNoEmailTitle" : "Kechirasiz" "UseProxySecret" : "Segredo" "CancelPasswordResetNo" : "TIDAK" "YourPasswordRememberNo" : "Niepewny" "UseProxyPassword" : "Sandi" "UseProxyUsername" : "Nutzername" "RestorePasswordNoEmailTitle" : "Sorry" "NotificationHiddenChatUserName" : "Nutzer" "YourPasswordSuccess" : "Sukces!" "ChannelTypePrivate" : "Privato" "BotToken" : "Token" "PasscodePassword" : "Parol" "PasswordOn" : "En" "YourPasswordHeader" : "Parolingiz" "CancelPasswordResetYes" : "OUI" "LoginPassword" : "Senha" "PasswordOff" : "Off" "UseProxyPassword" : "Parol" "PaymentPasswordTitle" : "Parol" "com_batchsdk_local_campaign_debug_fragment_token" : "Token" "PasswordRecovery" : "Passwort-Wiederherstellung" "UseProxyPassword" : "Parola" "PasswordOn" : "Nyala" "google_crash_reporting_api_key" : "AIzaSyDgfHzB0cppfDz8bCBJ4_vXxEqucxnKFz8" "Token" : "Gettone" "PaymentPasswordTitle" : "Senha" "NotificationHiddenChatUserName" : "User" "CancelPasswordResetNo" : "NON" "PasswordOff" : "Mati" "TypePrivate" : "Privat" "PasswordOff" : "Ochirilgan" "google_app_id" : "1:718227292047:android:c329846d130bb9c1ebd5fa" "BotToken" : "Zeichen" "TypePrivateGroup" : "Privado" "PasswordCode" : "Codice" "LoginPassword" : "Passwort" "TypePrivate" : "Privado" "TypePrivateGroup" : "Private" "LoginPassword" : "Parola" "ChannelTypePrivate" : "Pribadi" "PasswordManager" : "Passwortverwaltung" "Token" : "Znak" "CancelPasswordResetYes" : "IYA" "CancelPasswordResetYes" : "EVET" "UseProxySecret" : "Rahasia" "UseProxyPassword" : "Passwort" "UseProxyUsername" : "Username" "PasswordOn" : "Yoqilgan" "PasswordCode" : "Kod" "NotificationHiddenChatUserName" : "Usuario" "PaymentPasswordEmailTitle" : "Wiederherstellungs-E-Mail" "ChannelTypePrivate" : "Privat" "YourPasswordSuccess" : "Berhasil!" "PaymentPasswordTitle" : "Parola" "PasswordOn" : "On" "PasscodePassword" : "Passwort" "UseProxyPassword" : "Senha" "UseProxySecret" : "Secreto" "UseProxyPassword" : "Password" "CancelPasswordResetYes" : "JA" "TypePrivateGroup" : "Prywatna" "Token" : "Zeichen" "NotificationHiddenChatUserName" : "Utente" "YourPassword" : "Parolingiz" "BotToken" : "Znak" "TypePrivateGroup" : "Gizli" "CancelPasswordResetNo" : "HAYIR" "PaymentPasswordTitle" : "Passwort" "ReportSpamUser" : "BLOQUER" "TypePrivate" : "Private" "PasswordOff" : "aus" "NotificationHiddenChatUserName" : "Pengguna" "Token" : "Jeton" "google_api_key" : "AIzaSyDgfHzB0cppfDz8bCBJ4_vXxEqucxnKFz8" "PasswordCode" : "Kode" "PasscodePassword" : "Password" "PasswordOn" : "Auf" "RestorePasswordNoEmailTitle" : "Desculpe" "NotificationHiddenChatUserName" : "Foydalanuvchi" "LoginPassword" : "Password" "TypePrivate" : "Privato" "CancelPasswordResetYes" : "TAK" "UseProxySecret" : "Segreto" "Username" : "Username" "PasswordOff" : "Desativada" "CancelPasswordResetYes" : "YES" "ChannelTypePrivate" : "Prywatny" "TypePrivateGroup" : "Privato" "YourPasswordSuccess" : "Fatto!" "UseProxySecret" : "Geheimnis" "AbortPasswordMenu" : "Cancelar" "PasswordOn" : "Ativada" "Token" : "Token" "RestorePasswordNoEmailTitle" : "Przepraszamy" wmsAuthSign=b5e04648293f76772a90791b581c99e3 ot=aXNfZnJlZT0xJnNlcnZlcl90aW1lPTYvMTQvMjAyMSAyOjIwOjQzIFBNJmhhc2hfdmFsdWU9OFhjYzRYSG5Ta0Mvdm8rQjFLUi9Mdz09JnZhbGlkbWludXRlcz02MDAw ot=aXNfZnJlZT0xJnNlcnZlcl90aW1lPTYvMTQvMjAyMSAyOjE3OjI5IFBNJmhhc2hfdmFsdWU9RjVIUmtmMkNtTWpCMTd0Y1dsSWIrQT09JnZhbGlkbWludXRlcz02MDAw JY+Cn0qwsdiDNm7bRMKW8A== 4c56c404c0cd864269ea87b45a0e0c18 ot=aXNfZnJlZT0xJnNlcnZlcl90aW1lPTYvMTQvMjAyMSAyOjE2OjUzIFBNJmhhc2hfdmFsdWU9TnI4cFpXdGM2bnNpVG9tOCtIRlk5UT09JnZhbGlkbWludXRlcz02MDAw ot=aXNfZnJlZT0xJnNlcnZlcl90aW1lPTYvMTQvMjAyMSAyOjg6MjMgUE0maGFzaF92YWx1ZT1Fd1lVNG5YeDZRTmhGZUpvRlNvc29nPT0mdmFsaWRtaW51dGVzPTYwMDA= ot=aXNfZnJlZT0xJnNlcnZlcl90aW1lPTYvMTQvMjAyMSAyOjEwOjEyIFBNJmhhc2hfdmFsdWU9SG5VMjdHd05RRi92K3NCZzd2WnBYZz09JnZhbGlkbWludXRlcz02MDAw ot=aXNfZnJlZT0xJnNlcnZlcl90aW1lPTYvMTQvMjAyMSAyOjIwOjU0IFBNJmhhc2hfdmFsdWU9OEtKeTFpWllYc2ZmdUkvbGpCV2Z3Zz09JnZhbGlkbWludXRlcz02MDAw SVqWumuteCQHvVIaALrOZXuzVVVeS7f4FGxxu6V+es4= 3e1a68e15b0801c43b69f712b3eb75c1 1967217306c8b4164dd074a6d2f854b1 wmsAuthSign=2802daf4c39f07591a59b78cab367eb3 b16b3b3ea616313e42f8ef5c45c8f1d1 ot=aXNfZnJlZT0xJnNlcnZlcl90aW1lPTYvMTQvMjAyMSAyOjE5OjIzIFBNJmhhc2hfdmFsdWU9NklxWmtnUWtpS1JRRkNhRkk1bjFBUT09JnZhbGlkbWludXRlcz02MDAw wmsAuthSign=3e1a68e15b0801c43b69f712b3eb75c1 ot=aXNfZnJlZT0xJnNlcnZlcl90aW1lPTYvMTQvMjAyMSAyOjE4OjE1IFBNJmhhc2hfdmFsdWU9YVNsdzBLRUluTDhOTmlEdTVCTm9LQT09JnZhbGlkbWludXRlcz02MDAw ot=aXNfZnJlZT0xJnNlcnZlcl90aW1lPTYvMTQvMjAyMSAyOjE3OjM1IFBNJmhhc2hfdmFsdWU9YVQ2MGJHVUp3U0hlc1NiMHpoU29XZz09JnZhbGlkbWludXRlcz02MDAw f94b1b3768856ce773d476c57675647e f696303d88c17ba2741648912bd7d9d1 WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18= ot=aXNfZnJlZT0xJnNlcnZlcl90aW1lPTYvMTQvMjAyMSAyOjIxOjEzIFBNJmhhc2hfdmFsdWU9cHYyaGFDbkovcDJ5aXovNGRYVjRBZz09JnZhbGlkbWludXRlcz02MDAw rlUZNDehZJQb8XsqzCjLeQDBN4R8TydAkoeG4tiGOmPY62WYo ot=aXNfZnJlZT0xJnNlcnZlcl90aW1lPTYvMTQvMjAyMSAyOjEzOjE0IFBNJmhhc2hfdmFsdWU9bmoya3JBZDVkbWhNd2RySVpLcllldz09JnZhbGlkbWludXRlcz02MDAw uUwZgwDOxcBXrQcntwu+kYFpkiVkOaezL0WYEZ3anJc= ot=aXNfZnJlZT0xJnNlcnZlcl90aW1lPTYvMTQvMjAyMSAyOjE0OjI0IFBNJmhhc2hfdmFsdWU9aFFhL1I0SGRlalJVM3VneXowbkJJQT09JnZhbGlkbWludXRlcz02MDAw 15d6f03e4d936187fc42fc6c08c4fd75 8d21af41a9f59344941819569e77c80c 553443519b98733c1b8961cf7c10f158 wmsAuthSign=bf188e3d2c86b0571fbd5591f88eaae7 aHR0cHM6Ly9kbnMzLjAwZ29vZ2xlLmluZm8v wmsAuthSign=6d9c8c7aa0d1ebecfe96e05bb2675861 wmsAuthSign=1967217306c8b4164dd074a6d2f854b1 ot=aXNfZnJlZT0xJnNlcnZlcl90aW1lPTYvMTQvMjAyMSAyOjIxOjEwIFBNJmhhc2hfdmFsdWU9emZBZGZpcnFjR0RYOHRGRXJWNk5Mdz09JnZhbGlkbWludXRlcz02MDAw ot=aXNfZnJlZT0xJnNlcnZlcl90aW1lPTYvMTQvMjAyMSAyOjE3OjUwIFBNJmhhc2hfdmFsdWU9S1llVkdxT3I3L3pzZXNQV0hSclRsUT09JnZhbGlkbWludXRlcz02MDAw c43a68ace6f2afbcc88615dfb52902ce ot=aXNfZnJlZT0xJnNlcnZlcl90aW1lPTYvMTQvMjAyMSAyOjg6MTcgUE0maGFzaF92YWx1ZT14cDZ5V2JaeFRPVVBIRlVkKzlSVkVRPT0mdmFsaWRtaW51dGVzPTYwMDA= 0000016742C00BDA259000000168CE0F13200000016588840DCE7118A0002FBF1C31C3275D78 wmsAuthSign=0c95a42af110afc4dcf5503847e65171 wmsAuthSign=4ea6ccda58a8f30b1fcb4dec771b1e65 0c3b8f58fc9cf93bfb151d9400c8f795 ot=aXNfZnJlZT0xJnNlcnZlcl90aW1lPTYvMTQvMjAyMSAyOjE0OjMyIFBNJmhhc2hfdmFsdWU9Z1BNTU9meG1RU3h3Z25GWkVuSWdjQT09JnZhbGlkbWludXRlcz02MDAw ot=aXNfZnJlZT0xJnNlcnZlcl90aW1lPTYvMTQvMjAyMSAyOjEyOjQ0IFBNJmhhc2hfdmFsdWU9NzVXanhTZWZUZ01pd2xrZXBmNUc0dz09JnZhbGlkbWludXRlcz02MDAw cab5a50adb4ccbae74b5a4d1c3a403d2 wmsAuthSign=dc63c69d74de37cb50ebab7fe185c16b ot=aXNfZnJlZT0xJnNlcnZlcl90aW1lPTYvMTQvMjAyMSAyOjE5OjEwIFBNJmhhc2hfdmFsdWU9NU9EMDkxMW1yNzBXNWlrNDhicFI1UT09JnZhbGlkbWludXRlcz02MDAw ot=aXNfZnJlZT0xJnNlcnZlcl90aW1lPTYvMTQvMjAyMSAyOjE0OjE2IFBNJmhhc2hfdmFsdWU9ako4WGdFSCtWa00vUVg3OEM5SFdlQT09JnZhbGlkbWludXRlcz02MDAw ABVGDE2JZIQKLMNOPRSTUFHC34WXY9678 bb392ec0-8d4d-11e0-a896-0002a5d5c51b ot=aXNfZnJlZT0xJnNlcnZlcl90aW1lPTYvMTQvMjAyMSAyOjE3OjMxIFBNJmhhc2hfdmFsdWU9akR4Q2J6c2dMMjNES2pZdmcrK2p1dz09JnZhbGlkbWludXRlcz02MDAw 470fa2b4ae81cd56ecbcda9735803434cec591fa 600FDA5EA5A05B32DC147012D4DA7F wmsAuthSign=85f57a6b15bd17e49f7b83dc27f9662e 8c9dbfe58437d1739540f5d53c72ae4b fccaf47420f5ae97b6fab5b9c17f3bbd wmsAuthSign=c43a68ace6f2afbcc88615dfb52902ce 293ef6e9bae360eac51259 0989bbbd512f012b0e88646b37f5400c 622fd9f8108fb7e0aa912c3abcebbf80 85f57a6b15bd17e49f7b83dc27f9662e 1a70a2edbebae72564b0f345fcf5ab29 09f7fac8cb6f0b7bf92161e34167b01e c08ee62eb187562b938cbdfba6efd8ce ot=aXNfZnJlZT0xJnNlcnZlcl90aW1lPTYvMTQvMjAyMSAyOjExOjcgUE0maGFzaF92YWx1ZT00OEhRZnB1dVE5NDFaMlV3K1F0SHZBPT0mdmFsaWRtaW51dGVzPTYwMDA= ot=aXNfZnJlZT0xJnNlcnZlcl90aW1lPTYvMTQvMjAyMSAyOjE2OjQzIFBNJmhhc2hfdmFsdWU9MUpsL3VYME1yc1ZNTExQT2xXK09EZz09JnZhbGlkbWludXRlcz02MDAw 6725dc54945ebc959e624679fc4c3fd4 00eb035a7652f23755c955f165888f01 wmsAuthSign=35b9322b3e7c0a161888db702f166871 ot=aXNfZnJlZT0xJnNlcnZlcl90aW1lPTYvMTQvMjAyMSAyOjc6MjkgUE0maGFzaF92YWx1ZT1ZK2g4ZVNNVXBLc2lRV2htZGpjRm5BPT0mdmFsaWRtaW51dGVzPTYwMDA= ot=aXNfZnJlZT0xJnNlcnZlcl90aW1lPTYvMTQvMjAyMSAyOjg6MjMgUE0maGFzaF92YWx1ZT1QWjhVL2pUZy8rclJtTGVWcGNDSXl3PT0mdmFsaWRtaW51dGVzPTYwMDA= 1706190b5a3f9c7cfc8e379161e6479b UZJDjsNp1+4M5x9cbbdflB779y5YRBcV6Z6rBMLIrO4= a950819a37395d7c4a7f8993e433ac1d 35b9322b3e7c0a161888db702f166871 16610039c34cb3556d63449618cca796 ot=aXNfZnJlZT0xJnNlcnZlcl90aW1lPTYvMTQvMjAyMSAyOjY6MjAgUE0maGFzaF92YWx1ZT1ienFHSmo3akFoeFEwMXQwWTZudW1nPT0mdmFsaWRtaW51dGVzPTYwMDA= ot=aXNfZnJlZT0xJnNlcnZlcl90aW1lPTYvMTQvMjAyMSAyOjc6MzAgUE0maGFzaF92YWx1ZT0zSDJPUUc5MWtoUG9wcnJBQWtrL01BPT0mdmFsaWRtaW51dGVzPTYwMDA= aHR0cHM6Ly9kbnMuMDAwMjEyZ3JhaGFtYmVsLmluZm8v 29b8d55cfea0a2ac34b606cf1d18fa9a 9f2e240cfebb811cacd08fbe00e9fe4b 3cc2761b9c14520bcf137f2f17287a1d ot=aXNfZnJlZT0xJnNlcnZlcl90aW1lPTYvMTQvMjAyMSAyOjE5OjI2IFBNJmhhc2hfdmFsdWU9ZHovZkNweW0xNG0rTzFXUloySzFLUT09JnZhbGlkbWludXRlcz02MDAw b5e04648293f76772a90791b581c99e3 ot=aXNfZnJlZT0xJnNlcnZlcl90aW1lPTYvMTQvMjAyMSAyOjE2OjU2IFBNJmhhc2hfdmFsdWU9a3F1RDhjTE5XRDc3OHY1RlNuQlFZUT09JnZhbGlkbWludXRlcz02MDAw ot=aXNfZnJlZT0xJnNlcnZlcl90aW1lPTYvMTQvMjAyMSAyOjE5OjIxIFBNJmhhc2hfdmFsdWU9eVcrbklQc0VRczR3cWNQcnJKam5oZz09JnZhbGlkbWludXRlcz02MDAw c06c8400-8e06-11e0-9cb6-0002a5d5c51b ot=aXNfZnJlZT0xJnNlcnZlcl90aW1lPTYvMTQvMjAyMSAyOjE1OjI4IFBNJmhhc2hfdmFsdWU9VUxXbmh2eUV4UlhxTVM5SUlxWVVpQT09JnZhbGlkbWludXRlcz02MDAw 5ec1102217701566a6db88d6385861ba wmsAuthSign=1a70a2edbebae72564b0f345fcf5ab29 ot=aXNfZnJlZT0xJnNlcnZlcl90aW1lPTYvMTQvMjAyMSAyOjEyOjkgUE0maGFzaF92YWx1ZT1FaTU3Rk5RdjFPbjM2SUwzVWh1MGdRPT0mdmFsaWRtaW51dGVzPTYwMDA= Wd8xe/qfTwq3ylFNd3IpaqLHZbh2ZNCLluVzmeNkcpw= 014b35b6184100b085b0d0572f9b5103 wmsAuthSign=d26089291486ebdafbec8109e8e115f3 aHR0cHM6Ly9kbnM0LjAweWFuZGV4LmluZm8v f628db0292b6b6666c75cda6241d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d26089291486ebdafbec8109e8e115f3 B3EEABB8EE11C2BE770B684D95219ECB ot=aXNfZnJlZT0xJnNlcnZlcl90aW1lPTYvMTQvMjAyMSAyOjU6NTAgUE0maGFzaF92YWx1ZT0yd0E3eitrQWh3KzY0ckJNZGltUlh3PT0mdmFsaWRtaW51dGVzPTYwMDA= ot=aXNfZnJlZT0xJnNlcnZlcl90aW1lPTYvMTQvMjAyMSAyOjEwOjUxIFBNJmhhc2hfdmFsdWU9KzdMTVo4cW43MzlLVEdsZnJEMlBOZz09JnZhbGlkbWludXRlcz02MDAw ot=aXNfZnJlZT0xJnNlcnZlcl90aW1lPTYvMTQvMjAyMSAyOjk6MyBQTSZoYXNoX3ZhbHVlPWFiZytibjBEdnNCbmNxK29JN2F4Tnc9PSZ2YWxpZG1pbnV0ZXM9NjAwMA== dc63c69d74de37cb50ebab7fe185c16b 8801db477bd9b890ab84c773397bd01b 49C1522548EBACD46CE322B6FD47F6092BB745D0F88082145CAF35E14DCC38E1 7d9fb75b1d6af4b66a139942a794eab7 ot=aXNfZnJlZT0xJnNlcnZlcl90aW1lPTYvMTQvMjAyMSAyOjE1OjYgUE0maGFzaF92YWx1ZT1RbDdHdTE5MjhCM2p6TXJvWWs1VjFRPT0mdmFsaWRtaW51dGVzPTYwMDA= bf188e3d2c86b0571fbd5591f88eaae7 4d24254fa51c800317b228c88f9ca07a JbQbUG5JMJUoI6brnx0x3vZF6jilxsapbXGVfjhN8Fg= bd6d7dac63585b5ed7dc8d1433f6bce6 2802daf4c39f07591a59b78cab367eb3 ot=aXNfZnJlZT0xJnNlcnZlcl90aW1lPTYvMTQvMjAyMSAyOjg6MjIgUE0maGFzaF92YWx1ZT1ud3hhL3BXYXVGNE00dnBPNGtOS0pBPT0mdmFsaWRtaW51dGVzPTYwMDA= wmsAuthSign=0989bbbd512f012b0e88646b37f5400c 0c95a42af110afc4dcf5503847e65171 cAajgxHlj7GTSEIzIYIQxmEloOSoJq7VOaxWHfv72QM= ee269fdd1e3cbfc82fc5e9cc1e95f2ad ot=aXNfZnJlZT0xJnNlcnZlcl90aW1lPTYvMTQvMjAyMSAyOjEyOjUyIFBNJmhhc2hfdmFsdWU9ek44ZllvTVlSMGRGbGxtdVlnRHRYZz09JnZhbGlkbWludXRlcz02MDAw ot=aXNfZnJlZT0xJnNlcnZlcl90aW1lPTYvMTQvMjAyMSAyOjE3OjEzIFBNJmhhc2hfdmFsdWU9S082WFZMd0N4aDd2WGdpVitZRTV3UT09JnZhbGlkbWludXRlcz02MDAw ot=aXNfZnJlZT0xJnNlcnZlcl90aW1lPTYvMTQvMjAyMSAyOjIxOjExIFBNJmhhc2hfdmFsdWU9UVd2SUxZN1A0cTJzTzkzT01YS3RMQT09JnZhbGlkbWludXRlcz02MDAw wmsAuthSign=29b8d55cfea0a2ac34b606cf1d18fa9a ot=aXNfZnJlZT0xJnNlcnZlcl90aW1lPTYvMTQvMjAyMSAyOjExOjMzIFBNJmhhc2hfdmFsdWU9enExN3NoSkVxZXAzNUtwWlRTVm5CUT09JnZhbGlkbWludXRlcz02MDAw ot=aXNfZnJlZT0xJnNlcnZlcl90aW1lPTYvMTQvMjAyMSAyOjQ6NTUgUE0maGFzaF92YWx1ZT1BMkhQU0pHeU8vb1p3RGNEekpKTmZ3PT0mdmFsaWRtaW51dGVzPTYwMDA= 6d9c8c7aa0d1ebecfe96e05bb2675861 d2ea29cf56ed569a40fbdae259eec604 ea7d15a0cf98fddc2e171d596fac194b ot=aXNfZnJlZT0xJnNlcnZlcl90aW1lPTYvMTQvMjAyMSAyOjk6MTkgUE0maGFzaF92YWx1ZT01eGRBcnhkSDhERzZXTWh6cWNCTW9RPT0mdmFsaWRtaW51dGVzPTYwMDA= wmsAuthSign=ea7d15a0cf98fddc2e171d596fac194b ot=aXNfZnJlZT0xJnNlcnZlcl90aW1lPTYvMTQvMjAyMSAyOjExOjYgUE0maGFzaF92YWx1ZT1IVnlIaFhCZGJOZjM3YjdsaXRGK1VnPT0mdmFsaWRtaW51dGVzPTYwMDA= aHR0cHM6Ly9kbnMyLjAwZ21haWwuaW5mby8= ot=aXNfZnJlZT0xJnNlcnZlcl90aW1lPTYvMTQvMjAyMSAyOjIwOjU4IFBNJmhhc2hfdmFsdWU9NzFod2QwVi9qUXdxRFQ5T2pXNnFNQT09JnZhbGlkbWludXRlcz02MDAw ot=aXNfZnJlZT0xJnNlcnZlcl90aW1lPTYvMTQvMjAyMSAyOjE0OjI2IFBNJmhhc2hfdmFsdWU9Mk1mcTQxTlNDMkNUU2xZZG1oMEVqZz09JnZhbGlkbWludXRlcz02MDAw edef8ba9-79d6-4ace-a3c8-27dcd51d21ed 4ea6ccda58a8f30b1fcb4dec771b1e65 2cfbe6a8fd21cabc6c015b35e1903f1b
信息 应用程序记录日志信息,不得记录敏感信息
应用程序记录日志信息,不得记录敏感信息 https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#logs Files: a0/b.java, line(s) 36,48,60,74 a6/g.java, line(s) 31,38,41,50,84,108 a6/o.java, line(s) 102 aa/c0.java, line(s) 110 aa/n.java, line(s) 129,132,150,372,668 aa/p.java, line(s) 306,311,328 aa/p0.java, line(s) 1914 b0/a.java, line(s) 25,30,47,52,57,65,70 b0/d.java, line(s) 19 b2/a.java, line(s) 7,11,15,23,27 b5/c.java, line(s) 99,105,165 c0/c.java, line(s) 148 c5/b.java, line(s) 89,96,109 c6/b.java, line(s) 28,38,15,48,58,68 ca/b.java, line(s) 36 com/batch/android/f0/a.java, line(s) 171,176,183,187,203,213 com/batch/android/f0/b.java, line(s) 33 com/batch/android/g0/s.java, line(s) 103,116,27,40,53,69,82,137,150,171,184 com/batch/android/messaging/g/c.java, line(s) 102 com/batch/android/messaging/g/f.java, line(s) 86,186,85,185 com/batch/android/messaging/g/h.java, line(s) 725,754,761,724,753,760,581,590 com/batch/android/messaging/view/i/b.java, line(s) 324 com/batch/android/messaging/view/k/b.java, line(s) 56,105,137,146,151,172,186,197,202,55,104,136,145,150,171,185,196,201 com/batch/android/messaging/view/l/b.java, line(s) 151 com/batch/android/messaging/view/l/c.java, line(s) 185,203 com/wdullaer/materialdatetimepicker/time/RadialPickerLayout.java, line(s) 257 com/wdullaer/materialdatetimepicker/time/c.java, line(s) 109,119 com/wdullaer/materialdatetimepicker/time/d.java, line(s) 140,149 d5/b.java, line(s) 83,73,95,112,65,72,82,94,111,66 d5/d0.java, line(s) 67,68 d7/b.java, line(s) 55,72 db/b.java, line(s) 683,731,960,776,990 db/d.java, line(s) 497,552,735 e7/c.java, line(s) 91,94,116,124,125 ea/c.java, line(s) 50 eb/a.java, line(s) 254,273,363,383,412 eb/b.java, line(s) 517 eb/c.java, line(s) 46,281 f/a.java, line(s) 100 f4/z.java, line(s) 16 f6/l.java, line(s) 181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199 f8/a.java, line(s) 14 g3/f.java, line(s) 35 ga/b.java, line(s) 34,37,47,50,60,64,93,97,109,113,135,139,164,167,180,183,193,196,218,221,231,234 ga/c.java, line(s) 25,27,31,41,43,81,85,95,99,109,113,123,127 ga/h.java, line(s) 47 h/g.java, line(s) 151,187,264 h8/f.java, line(s) 58 ha/a3.java, line(s) 65,75,80,85,92,95,136 ha/d4.java, line(s) 23 ha/g.java, line(s) 135,142 ha/g0.java, line(s) 532 ha/g3.java, line(s) 65 ha/h3.java, line(s) 56 ha/i.java, line(s) 44,76 ha/k.java, line(s) 388,79,94,340,399 ha/q0.java, line(s) 76,80,39 ha/r4.java, line(s) 101,107 ha/w.java, line(s) 58 ha/x.java, line(s) 99,205,225,228,328,357 ha/z.java, line(s) 833,343,346,349,458,661,679,725,737,764,782 hb/h.java, line(s) 132 hb/i.java, line(s) 331,416 i/d.java, line(s) 234 i3/a.java, line(s) 172 i4/t.java, line(s) 32 i9/b.java, line(s) 217,255,260,280,287,297,307 ia/b.java, line(s) 545 ia/e.java, line(s) 259 ia/n0.java, line(s) 1223,3274,5199,2999,4085 j0/a.java, line(s) 32 j1/u.java, line(s) 105,109,113,13,118 j3/b.java, line(s) 27,44,69 j3/d.java, line(s) 66,116,129,154,224,239,61,114,128,153,219,238,150,166,178,188,195 j3/e.java, line(s) 28,25,25 j3/i.java, line(s) 53,48 j3/j.java, line(s) 111,151,197,106,149,172,193,227,277,296,339,173,228,278,297,340,140,205 j3/s.java, line(s) 25 j3/u.java, line(s) 33,47,25,39 j3/v.java, line(s) 46,34,65 ja/c.java, line(s) 260 ja/e.java, line(s) 546 ja/f0.java, line(s) 1314,3512,4482,3003,3884 k0/c.java, line(s) 83 k3/i.java, line(s) 25 k4/i.java, line(s) 23 k5/d0.java, line(s) 15 k5/f.java, line(s) 39,66,27,28,65 l0/a.java, line(s) 165,170,177,181,197,207 l3/d.java, line(s) 38,44,50,33,56,62 l3/q.java, line(s) 30 l3/u.java, line(s) 129,149,169,181 la/a.java, line(s) 45,169,71,72,78,135,140,154,155,161,164,168,194,197,280,293 la/b.java, line(s) 32,39,44 la/d.java, line(s) 36 m0/a.java, line(s) 327,368,426,200,207,209,215,350,361,372,410,113,144,203,211,218,231,240,252,312,330 m0/b.java, line(s) 59,70,72,99,101,119,140,180,222,244,293,303,306,310,95,103,112,232,248,263,301 ma/c.java, line(s) 67 n4/c.java, line(s) 79,91 n9/e.java, line(s) 48,111 na/f.java, line(s) 40,45,49,323 o3/a.java, line(s) 33,38,21 oa/b.java, line(s) 42 oa/d.java, line(s) 107,169,260,321 org/telegram/SQLite/SQLiteCursor.java, line(s) 111,116 org/telegram/SQLite/SQLiteDatabase.java, line(s) 84,39 org/telegram/SQLite/SQLitePreparedStatement.java, line(s) 82,90 org/telegram/messenger/AndroidUtilities$LinkMovementMethodMy.java, line(s) 19 org/telegram/messenger/AndroidUtilities.java, line(s) 1310,1318,2265,2635,231,366,381,459,493,599,602,634,679,806,846,865,877,932,995,1274,1297,1333,1354,1365,1394,1403,1591,1595,1654,1664,1672,1804,1849,1912,1927,2214,2376,2385,2402,2651,2669,2950,3314,3393,3443,3455,3599 org/telegram/messenger/AnimatedFileDrawableStream.java, line(s) 122 org/telegram/messenger/ApplicationLoader.java, line(s) 218,294,320,330,341,390,413,477,498,80,117,156,182,196,241,265,278,310 org/telegram/messenger/ChatObject.java, line(s) 136,185,255,537,546,559,834,846,872,877,888,893 org/telegram/messenger/ChatThemeController.java, line(s) 64,117,137,169 org/telegram/messenger/ContactsController.java, line(s) 205,611,758,797,964,1077,1086,1112,1252,1272,1444,2036,2041,2154,318,346,359,466,470,479,1010,1505,1541,1836,1878,2178 org/telegram/messenger/ContactsRemoteViewsFactory.java, line(s) 149 org/telegram/messenger/ContactsSyncAdapterService.java, line(s) 44,30 org/telegram/messenger/DispatchQueue.java, line(s) 37,48,57,81 org/telegram/messenger/DownloadController.java, line(s) 150,165,170,249,295,370,391,811 org/telegram/messenger/Emoji.java, line(s) 416,423,485,497 org/telegram/messenger/EmuInputDevicesDetector.java, line(s) 55 org/telegram/messenger/FeedRemoteViewsFactory.java, line(s) 111 org/telegram/messenger/FileLoadOperation.java, line(s) 722,792,903,969,1363,1424,321,327,335,341,349,355,363,369,378,564,574,584,594,605,934,936,947,951,1100 org/telegram/messenger/FileLoader.java, line(s) 816,824,835,1191 org/telegram/messenger/FileLog.java, line(s) 48,58,68,206 org/telegram/messenger/FileRefController.java, line(s) 565 org/telegram/messenger/FileStreamLoadOperation.java, line(s) 44 org/telegram/messenger/FileUploadOperation.java, line(s) 152,190,120 org/telegram/messenger/FilesMigrationService.java, line(s) 295,202,206,243,248 org/telegram/messenger/FingerprintController.java, line(s) 33,58,81,87,102,118,127 org/telegram/messenger/GcmPushListenerService$1.java, line(s) 30,36,41,49,55,64 org/telegram/messenger/GcmPushListenerService$2.java, line(s) 30,36,41,49,55,64 org/telegram/messenger/GcmPushListenerService$3.java, line(s) 27,37,43,47 org/telegram/messenger/GcmPushListenerService.java, line(s) 300,427,435,54,62,66,68,82,109,365 org/telegram/messenger/GoogleVoiceClientService.java, line(s) 34 org/telegram/messenger/ImageLoader.java, line(s) 240,915,933,1017,1096,1104,1114,1224,1581,1686,1843,1959,1965,1996,2008 org/telegram/messenger/ImageReceiver.java, line(s) 462,527,581,834 org/telegram/messenger/ImportingService.java, line(s) 63,77 org/telegram/messenger/Jsoner.java, line(s) 460,487,803,832,2093,83,85,92,97,107,109,116,121,156,196,557,598,652,667,680,851,856,861,865,875,1886,1897,2070,2074,2138,2140,2143,2149,2153,2177,2181,2187,2191,2521,2523,2527,2612,2614,2618,2644,2646,2650,2704,2715,2738,2745,2748,2817,2954,2965,3049,3065,3072,3075,3102,3113,3143,3154,3176,3183,3186,3215,3223,3227,3234,3243,3247,3260,3282,3539,4281 org/telegram/messenger/KeepAliveJob.java, line(s) 21,27,40,65,77 org/telegram/messenger/LinkifyPort.java, line(s) 42 org/telegram/messenger/LocaleController.java, line(s) 1532,3070,356,361,414,479,509,525,544,583,600,667,724,734,772,805,897,906,937,993,1147,1153,1159,1170,1290,1393,1493,1599,1639 org/telegram/messenger/LocationController.java, line(s) 604,804,821,843,915,929,1185 org/telegram/messenger/MediaController$5.java, line(s) 67 org/telegram/messenger/MediaController$6.java, line(s) 21 org/telegram/messenger/MediaController$7.java, line(s) 30 org/telegram/messenger/MediaController$8.java, line(s) 23 org/telegram/messenger/MediaController$9.java, line(s) 30 org/telegram/messenger/MediaController$MediaLoader.java, line(s) 101,112,120,128,136,243 org/telegram/messenger/MediaController$StopMediaObserverRunnable.java, line(s) 25,33 org/telegram/messenger/MediaController$VideoConvertRunnable.java, line(s) 16 org/telegram/messenger/MediaController.java, line(s) 851,288,293,298,303,522,532,562,585,596,602,608,657,665,671,679,834,860,869,928,991,999,1011,1114,1123,1172,1274,1288,1361,1428,1497,1566,1610,1625,1650,1668,1818,2154,2300,2558,2569 org/telegram/messenger/MediaDataController.java, line(s) 3738,712,745,817,853,879,1001,1152,1229,1280,1307,1371,1457,1609,1647,1680,1708,1859,1942,2123,2158,2244,2433,2571,2763,2789,2826,2886,2926,2941,2955,3013,3046,3070,3103,3124,3204,3245,3268,3307,3533,5357,5626 org/telegram/messenger/MessageObject.java, line(s) 343,628,2290 org/telegram/messenger/MessagesController.java, line(s) 2298,2304,2310,2330,6783,7516,7629,7717,7725,7739,7902,8980,10098,10620,10873,10881,10990,11409,11421,11434,11454,11459,11466,11483,11498,11778,977,993,1021,1739,2215,2739,2759,2787,2813,4589,4604,6006,9007,9413,9446,9483,10125,10966,11009,11096,11800,11999,5142,6051 org/telegram/messenger/MessagesStorage.java, line(s) 3076,5529,6531,8107,8209,461,493,586,596,606,634,646,702,832,845,899,916,924,932,940,953,997,1065,1074,1117,1171,1174,1206,1210,1272,1291,1333,1379,1402,1460,1479,1606,1642,1718,1823,1837,1866,1882,1905,1929,2045,2435,2556,2684,2720,2760,2813,2856,2864,2873,2913,2948,2960,3069,3116,3140,3277,3286,3334,3343,3428,3482,3497,3629,3658,3725,3748,3756,3811,3845,3857,3870,3883,3923,3938,3950,3964,3984,4028,4044,4058,4086,4114,4144,4233,4295,4308,4355,4451,4474,4505,4528,4632,4664,4689,4841,4889,4921,5039,5147,5172,5296,5328,5378,5485,5506,6040,6092,6138,6162,6186,6210,6257,6458,6676,6717,6801,6827,6909,6926,7048,7057,7065,7146,7246,7251,7277,7291,7308,7329,7394,7438,7496,7587,7626,7643,7654,7679,7705,7720,7736,7753,7818,8004,8008,8236,8241,8251,8257,8629 org/telegram/messenger/MusicBrowserService.java, line(s) 120,242,267,417 org/telegram/messenger/MusicPlayerService.java, line(s) 250,528 org/telegram/messenger/NotificationBadge.java, line(s) 172,472 org/telegram/messenger/NotificationCenter.java, line(s) 1214 org/telegram/messenger/NotificationImageProvider.java, line(s) 100 org/telegram/messenger/NotificationsController.java, line(s) 297,312,494,516,599,1299,1420,1563,1578,155,211,216,223,269,294,309,318,341,404,469,491,499,524,610,619,648,652,661,691,695,1358,1371,1426,1442,1560,1575,1585,1646,1849,150 org/telegram/messenger/NotificationsDisabledReceiver.java, line(s) 31,35,46,55,68,82 org/telegram/messenger/OpenChatReceiver.java, line(s) 34 org/telegram/messenger/ScreenReceiver.java, line(s) 13,19 org/telegram/messenger/SecretChatHelper.java, line(s) 502,101,410,578,763,777,795,831,867,1085 org/telegram/messenger/SendMessagesHelper$LocationProvider.java, line(s) 30,107,112,121 org/telegram/messenger/SendMessagesHelper.java, line(s) 249,268,276,282,2648,2654,2669,2679,2693,577,635,1103,1169,1531,1641,2727,3593,3452 org/telegram/messenger/SharedConfig.java, line(s) 356,218,236,322,435,445,458,489,601 org/telegram/messenger/SmsReceiver.java, line(s) 51 org/telegram/messenger/SvgHelper.java, line(s) 1022,1061,1085,1098,1114,1233,1246,1261 org/telegram/messenger/UserConfig.java, line(s) 190 org/telegram/messenger/Utilities.java, line(s) 600,64,80,200,221,236,253,272,283,295,308,319,597,318,619 org/telegram/messenger/VideoEditedInfo.java, line(s) 349 org/telegram/messenger/VideoEncodingService.java, line(s) 66,95,45 org/telegram/messenger/XiaomiUtilities.java, line(s) 60 org/telegram/messenger/camera/CameraController.java, line(s) 272,293,400,419,758,133,138,308,370,426,451,461,473,502,505,523,543,556,569,574,580,585,593,622,648,660,703,842 org/telegram/messenger/camera/CameraSession.java, line(s) 202,218,223,240,321 org/telegram/messenger/camera/CameraView.java, line(s) 172,437,467,793,843,974,1142,1158,1488,180,188,197,204,216,230,237,248,262,280,319,329,578,583,591,701,710,720,728,762,907,1211 org/telegram/messenger/j5.java, line(s) 8 org/telegram/messenger/secretmedia/ExtendedDefaultDataSource.java, line(s) 143 org/telegram/messenger/support/JobIntentService.java, line(s) 126 org/telegram/messenger/video/AudioRecoder.java, line(s) 60 org/telegram/messenger/video/MediaCodecVideoConvertor.java, line(s) 49 org/telegram/messenger/video/TextureRenderer.java, line(s) 71,73 org/telegram/messenger/voip/AudioRecordJNI.java, line(s) 37,75,94,129,172,185,201,215,257,83,125,169,182,198 org/telegram/messenger/voip/AudioTrackJNI.java, line(s) 86,42,52,99,50,80 org/telegram/messenger/voip/Instance.java, line(s) 364 org/telegram/messenger/voip/JNIUtilities.java, line(s) 104 org/telegram/messenger/voip/NativeInstance.java, line(s) 80,135,304 org/telegram/messenger/voip/TelegramConnectionService.java, line(s) 25,52,42,69,18,80 org/telegram/messenger/voip/VideoCameraCapturer.java, line(s) 204 org/telegram/messenger/voip/VideoCapturerDevice.java, line(s) 286 org/telegram/messenger/voip/VoIPBaseService.java, line(s) 379,391,398,422,431,489,707,878,1241,1310,1788,1796,1802,247,281,328,470,481,499,513,561,638,676,769,859,1076,1297,1301,1664 org/telegram/messenger/voip/VoIPServerConfig.java, line(s) 35 org/telegram/messenger/voip/VoIPService.java, line(s) 569,581,588,610,619,837,898,971,989,1130,1442,1764,1995,2190,2355,2895,2991,2998,3005,3102,3111,3119,3498,3517,3537,3588,3919,3992,4168,4376,355,384,439,738,749,764,920,981,1013,1166,1290,1323,1340,1385,1436,1478,1500,1755,1964,2299,2353,2419,2443,2977,3011,3051,3771,3971,3976,4419,757,1296,1381,2667 org/telegram/tgnet/ConnectionsManager$d.java, line(s) 44,45,109,121,126 org/telegram/tgnet/ConnectionsManager$e.java, line(s) 24,25,66,67,84,40,99 org/telegram/tgnet/ConnectionsManager$f.java, line(s) 44,45,118,131,136,151 org/telegram/tgnet/ConnectionsManager$g.java, line(s) 42,101,114,119,134 org/telegram/tgnet/ConnectionsManager.java, line(s) 135,168,174,177,280,288,294,300,306,371,382,519,525,765,769,785,183,220,251,359,375,395,475,483,530,547,886 org/telegram/tgnet/NativeByteBuffer.java, line(s) 139,167,168,204,205,218,219,233,234,257,258,274,275,291,292,321,322,382,383,424,425,461,462,499,522,523,538,539,550,551,566,567,582,583,594,595 org/telegram/tgnet/c0.java, line(s) 59,60,74,75,91,100,109,118,134,135,150,151,165,166,194,228,229,249,250,273,274,291,292,312,313,350,351,379,403,404,419,420,456,457,493,494,513,514,529,530,541,542,571,572 org/telegram/tgnet/d0.java, line(s) 51 org/telegram/tgnet/ii.java, line(s) 34 org/telegram/tgnet/mi.java, line(s) 24 org/telegram/tgnet/rs0.java, line(s) 34 org/telegram/tgnet/vs0.java, line(s) 25 org/telegram/ui/ActionBar/ActionBarLayout.java, line(s) 823,827,1656 org/telegram/ui/ActionBar/ActionBarPopupWindow.java, line(s) 195,781,791 org/telegram/ui/ActionBar/DrawerLayoutContainer.java, line(s) 506 org/telegram/ui/ActionBar/b1.java, line(s) 144,238,282,1053 org/telegram/ui/ActionBar/k2.java, line(s) 4770,6141,1411,1430,1478,1676,2231,2407,2415,2603,2760,4513,5770,5857,5872,5953,5958,6183,6204,6434,6720 org/telegram/ui/ActionBar/l1.java, line(s) 295,421 org/telegram/ui/ActionBar/r0.java, line(s) 135,727 org/telegram/ui/ActionBar/v0.java, line(s) 369,384,498,512,527,539,588,656,736 org/telegram/ui/ActionBar/x2.java, line(s) 479 org/telegram/ui/ArticleViewer.java, line(s) 822,2520,2722,2745,2772,3978,8146,8680,9616,9648,9657,9788,9801 org/telegram/ui/BubbleActivity.java, line(s) 46,50,264 org/telegram/ui/Cells/c.java, line(s) 290,540 org/telegram/ui/Cells/d0.java, line(s) 2482,5093,5109 org/telegram/ui/Cells/e1.java, line(s) 370 org/telegram/ui/Cells/f1.java, line(s) 155 org/telegram/ui/Cells/g5.java, line(s) 323,324 org/telegram/ui/Cells/l.java, line(s) 303,312 org/telegram/ui/Cells/n0.java, line(s) 816 org/telegram/ui/Cells/o.java, line(s) 117 org/telegram/ui/Cells/t.java, line(s) 180,185 org/telegram/ui/Cells/u3.java, line(s) 123 org/telegram/ui/Cells/w0.java, line(s) 73 org/telegram/ui/Cells/y3.java, line(s) 435,459 org/telegram/ui/Components/AnimatedFileDrawable.java, line(s) 229,264 org/telegram/ui/Components/ChatActivityEnterView.java, line(s) 1266,3393,3459,3623,5258,6941,7580,8225,8609,8864 org/telegram/ui/Components/ChatAttachAlertPhotoLayout.java, line(s) 218,3167,3423,3756,3591 org/telegram/ui/Components/ClippingImageView.java, line(s) 176 org/telegram/ui/Components/Crop/b.java, line(s) 746,436,575 org/telegram/ui/Components/EditTextBoldCursor.java, line(s) 264,579,602,741,750 org/telegram/ui/Components/PipRoundVideoView.java, line(s) 412 org/telegram/ui/Components/RLottieDrawable.java, line(s) 209,343,821,995 org/telegram/ui/Components/RadioButton.java, line(s) 48,126 org/telegram/ui/Components/ThemeEditorView.java, line(s) 609,1371,1417,1426,1451 org/telegram/ui/Components/UndoView.java, line(s) 114 org/telegram/ui/Components/WebPlayerView.java, line(s) 1109,222,311,598,666,886,947,1004,1084,1619,1672,1826,1834,1842,1850,1858,1864,1913 org/telegram/ui/Components/a4.java, line(s) 1158,1249,1527,1594,1696,1929,1953,2145,2978,3047 org/telegram/ui/Components/aq.java, line(s) 66,248,255,264,271,281,295,302,391 org/telegram/ui/Components/b90.java, line(s) 2034 org/telegram/ui/Components/bh.java, line(s) 112,1730,1733,1834 org/telegram/ui/Components/bq.java, line(s) 737,738 org/telegram/ui/Components/by.java, line(s) 173,198 org/telegram/ui/Components/c40.java, line(s) 151 org/telegram/ui/Components/cr.java, line(s) 541 org/telegram/ui/Components/cz.java, line(s) 109 org/telegram/ui/Components/dn.java, line(s) 399,450,477,487 org/telegram/ui/Components/e7.java, line(s) 657,747,759 org/telegram/ui/Components/et.java, line(s) 639 org/telegram/ui/Components/f10.java, line(s) 1116,1123,1141,1618 org/telegram/ui/Components/f9.java, line(s) 687 org/telegram/ui/Components/fk.java, line(s) 331 org/telegram/ui/Components/fw.java, line(s) 593,668 org/telegram/ui/Components/gf.java, line(s) 630 org/telegram/ui/Components/hc0.java, line(s) 84,184 org/telegram/ui/Components/hu.java, line(s) 355,361,505,684,705,1076,1594,1877,1885,1900,1996,173,465,513,520,529,536,546,561,568,590,604,631,793,798,806,941,1146,1227,1236,1246,1254,1700,1731,1746,2451 org/telegram/ui/Components/if0.java, line(s) 144 org/telegram/ui/Components/ja0.java, line(s) 3711 org/telegram/ui/Components/jc0.java, line(s) 75 org/telegram/ui/Components/je0.java, line(s) 662,841,1716 org/telegram/ui/Components/kx.java, line(s) 517,535 org/telegram/ui/Components/l6.java, line(s) 277,281 org/telegram/ui/Components/l8.java, line(s) 562 org/telegram/ui/Components/li.java, line(s) 918,974,1187,1215,1368,1660,1787,1866,1884,1904,1913 org/telegram/ui/Components/mh0.java, line(s) 218,1588,1604 org/telegram/ui/Components/mo.java, line(s) 1194,1637,2071,5287 org/telegram/ui/Components/nb0.java, line(s) 198 org/telegram/ui/Components/on.java, line(s) 102,198 org/telegram/ui/Components/p30.java, line(s) 171 org/telegram/ui/Components/pj0.java, line(s) 91,210,241 org/telegram/ui/Components/q10.java, line(s) 108,240,546,821,833,847 org/telegram/ui/Components/q6.java, line(s) 92,387 org/telegram/ui/Components/qj0.java, line(s) 92,347,615 org/telegram/ui/Components/qz.java, line(s) 580 org/telegram/ui/Components/s5.java, line(s) 312 org/telegram/ui/Components/s50.java, line(s) 174,821,1086,1380 org/telegram/ui/Components/sq.java, line(s) 77,98,84,105 org/telegram/ui/Components/ss.java, line(s) 168 org/telegram/ui/Components/t10.java, line(s) 168,191,228,248 org/telegram/ui/Components/ut.java, line(s) 237,503,555,772,860 org/telegram/ui/Components/uw.java, line(s) 60 org/telegram/ui/Components/voip/g2.java, line(s) 339,649 org/telegram/ui/Components/voip/u1.java, line(s) 753,815,961,993 org/telegram/ui/Components/xf.java, line(s) 925 org/telegram/ui/Components/zj0.java, line(s) 47,78,118,121 org/telegram/ui/Components/zn.java, line(s) 137,304,338,351,408,446,530,545,559,889,915,996 org/telegram/ui/Components/zy.java, line(s) 238,257,651,723,1068,1120,1195,1442,1452 org/telegram/ui/ExternalActionActivity.java, line(s) 94,98,109,163,435 org/telegram/ui/GroupCreateActivity.java, line(s) 998 org/telegram/ui/InviteContactsActivity.java, line(s) 277,329,671,714 org/telegram/ui/LaunchActivity.java, line(s) 1083,1087,2081,2093,2286,2298,2302,2324,2336,3913,899,908,962,970,1294,1442,1598,1624,1759,1919,2770,2793,2798,2808,2913,2986,3071,3171,3216,3800,3896,4088,4095,4322,4336,264,270,631,641,1060,1138,1201,1845,1851,3133,3138,4384 org/telegram/ui/PhotoViewer.java, line(s) 5178,8237,8245,1828,4037,4658,4680,5303,5316,5801,5809,5922,6900,6962,7464,7989,8276,8286,8468,8556,8585,8788,8825,9310,9974,10318,10354,10526,10582,10628,11522,11535,11713,11769 org/telegram/ui/PopupNotificationActivity.java, line(s) 634,732 org/telegram/ui/ProfileActivity.java, line(s) 823,1424,2439,5282,5786,5947,6446,6499,6536,6650,8185 org/telegram/ui/SecretMediaViewer.java, line(s) 190,239,660,769,855 org/telegram/ui/ShareActivity.java, line(s) 80,96 org/telegram/ui/ThemeActivity.java, line(s) 1447,1452,1518,1530 org/telegram/ui/VoIPPermissionActivity.java, line(s) 32 org/telegram/ui/bk0.java, line(s) 1032 org/telegram/ui/c5.java, line(s) 478,492,1222,1230,1374,1599 org/telegram/ui/co.java, line(s) 643,717 org/telegram/ui/e30.java, line(s) 121 org/telegram/ui/e8.java, line(s) 811,1054,1066 org/telegram/ui/g40.java, line(s) 441,466 org/telegram/ui/gr.java, line(s) 604,629,653,664,734,772,845 org/telegram/ui/hg1.java, line(s) 1243,1364 org/telegram/ui/ie1.java, line(s) 164,185,400,411,635,651 org/telegram/ui/iq.java, line(s) 77 org/telegram/ui/j.java, line(s) 595,648,1124 org/telegram/ui/ji1.java, line(s) 212,1568,1582 org/telegram/ui/jr.java, line(s) 221,346,438 org/telegram/ui/k2.java, line(s) 308,362,551,681 org/telegram/ui/k6.java, line(s) 120,141,179,193 org/telegram/ui/l4.java, line(s) 458,469,1182 org/telegram/ui/m30.java, line(s) 291,345,352,361,368,379,393,400 org/telegram/ui/mt0.java, line(s) 749,500,1029 org/telegram/ui/na0.java, line(s) 338,495,1070,1141,1185,1214,1285,1309,1380,1459,2047,2079,2261,2439,2447,2491,2519,2528 org/telegram/ui/nj0.java, line(s) 77,422 org/telegram/ui/o00.java, line(s) 7010,7165 org/telegram/ui/o20.java, line(s) 1018 org/telegram/ui/ox.java, line(s) 1403 org/telegram/ui/p81.java, line(s) 404 org/telegram/ui/q01.java, line(s) 508,756 org/telegram/ui/qb1.java, line(s) 220,433 org/telegram/ui/rh.java, line(s) 3994,4147,4176,4204,4233,4264,4308,4337,8111,8121,8136,10458,12744,12778,16296,16323,2362,3007,4013,4164,4193,4221,4250,4288,4325,4354,7470,8392,8523,9368,11144,11583,12028,12268,13830,15355,17026,18157,19862,20109,20781,20871,4894,5116,9917,9931,9935,19586,19590,20206,20451 org/telegram/ui/rj1.java, line(s) 556,628,1517 org/telegram/ui/rk0.java, line(s) 297 org/telegram/ui/s61.java, line(s) 199 org/telegram/ui/sd1.java, line(s) 3302 org/telegram/ui/sx.java, line(s) 263 org/telegram/ui/t20.java, line(s) 219 org/telegram/ui/tk1.java, line(s) 193,126,138,324,474 org/telegram/ui/tools/activty/DeleteContactActivity.java, line(s) 956 org/telegram/ui/tools/activty/PlusSettingsActivity.java, line(s) 437,1170 org/telegram/ui/tools/activty/d.java, line(s) 74,455,588,689 org/telegram/ui/tools/dex_tv/a.java, line(s) 15 org/telegram/ui/tools/dex_tv/b2.java, line(s) 175,315 org/telegram/ui/tools/dex_tv/c1.java, line(s) 126,426 org/telegram/ui/tools/dex_tv/d1.java, line(s) 67,311,1058,1066,1075,986 org/telegram/ui/tools/dex_tv/d2.java, line(s) 160 org/telegram/ui/tools/dex_tv/d3.java, line(s) 699,191,200,209,730 org/telegram/ui/tools/dex_tv/e1.java, line(s) 199 org/telegram/ui/tools/dex_tv/g0.java, line(s) 238 org/telegram/ui/tools/dex_tv/h.java, line(s) 551 org/telegram/ui/tools/dex_tv/h0.java, line(s) 25 org/telegram/ui/tools/dex_tv/h2.java, line(s) 228,370 org/telegram/ui/tools/dex_tv/j.java, line(s) 372,375,265,278,289,296,327,429,439,447 org/telegram/ui/tools/dex_tv/l0.java, line(s) 43 org/telegram/ui/tools/dex_tv/n0.java, line(s) 29 org/telegram/ui/tools/dex_tv/o1.java, line(s) 268,546 org/telegram/ui/tools/dex_tv/q.java, line(s) 57 org/telegram/ui/tools/dex_tv/r.java, line(s) 45 org/telegram/ui/tools/dex_tv/r1.java, line(s) 622,741,778,784 org/telegram/ui/tools/dex_tv/t0.java, line(s) 56 org/telegram/ui/tools/dex_tv/t2.java, line(s) 180 org/telegram/ui/tools/dex_tv/v.java, line(s) 419,562 org/telegram/ui/tools/dex_tv/w1.java, line(s) 128,173,185,192 org/telegram/ui/tools/dex_tv/z.java, line(s) 94 org/telegram/ui/tools/p/helper/a.java, line(s) 97 org/telegram/ui/tools/p/service/a.java, line(s) 183,199,356 org/telegram/ui/tools/p/utlis/a.java, line(s) 67 org/telegram/ui/tools/service/DexBro.java, line(s) 74,88,93,105,107,127,145,151,160,174,191,195,201,207 org/telegram/ui/tq.java, line(s) 143,372,733,770,871,1027,1589,279 org/telegram/ui/tv.java, line(s) 199 org/telegram/ui/u4.java, line(s) 108,119 org/telegram/ui/uu.java, line(s) 382,1581,4583,6071,6855,1675,2953,2955,2962,2968,3014,3016,3023,3029,3124,3247,3253,5365,7389,7393,7405 org/telegram/ui/w91.java, line(s) 241,502,590,664 org/telegram/ui/wk.java, line(s) 400 org/telegram/ui/wz0.java, line(s) 724 org/telegram/ui/xl0.java, line(s) 621,850 org/telegram/ui/xo0.java, line(s) 807,821,3387,3784,4229,4516,5088,5834,6025,6064,6373 org/telegram/ui/xs0.java, line(s) 537,1950,2070,2229,2811,2931,2938,3276,3285,3309 org/telegram/ui/xt0.java, line(s) 198,203 org/telegram/ui/xw.java, line(s) 775,911 org/telegram/ui/y1.java, line(s) 22 org/telegram/ui/y6.java, line(s) 565,579,1314,1323,1332,1341,1350,1359,1368,2840 org/telegram/ui/yb0.java, line(s) 1382,578,1451,1581,1602,4125,5179,5195,5966,6850,7196,6795 org/telegram/ui/yh0.java, line(s) 552 org/telegram/ui/yk0.java, line(s) 685 org/telegram/ui/yo.java, line(s) 1712 org/webrtc/AndroidVideoDecoder.java, line(s) 125 org/webrtc/EglRenderer.java, line(s) 157,458 org/webrtc/GlGenericDrawer.java, line(s) 187 org/webrtc/GlShader.java, line(s) 106 org/webrtc/MediaCodecUtils.java, line(s) 102 org/webrtc/ScreenCapturerAndroid.java, line(s) 44,145 org/webrtc/TextureBufferImpl.java, line(s) 186 org/webrtc/YuvConverter.java, line(s) 116,142 org/webrtc/voiceengine/WebRtcAudioRecord.java, line(s) 89,406,465 p9/a.java, line(s) 22 pa/a.java, line(s) 276,294,901 q1/a.java, line(s) 100 q3/a.java, line(s) 45,53 q4/t.java, line(s) 59,29 q9/b.java, line(s) 106,122,135 qa/b$b.java, line(s) 23,24 r0/a.java, line(s) 99,418,427 r0/b.java, line(s) 60,191 r2/m0.java, line(s) 10,16 r3/h.java, line(s) 18 r3/m.java, line(s) 87 r3/q.java, line(s) 18,17 r3/r.java, line(s) 46,49,81,101,124,133,179,191 r9/i.java, line(s) 437 r9/n.java, line(s) 564,589,850 r9/n0.java, line(s) 288,395,448,456 r9/n1.java, line(s) 100,308,430 r9/p0.java, line(s) 473 r9/x1.java, line(s) 163,192,225 ra/h0.java, line(s) 1096,3048,3393,3475,736,762,784,3498,4144,4242,4314,4628,4729,4757 ra/v1.java, line(s) 1883,1952,2021,2819,3009 s/b.java, line(s) 66 s/f.java, line(s) 183 s0/c.java, line(s) 35,38,50,28,42 t/c.java, line(s) 409,414 t/e.java, line(s) 84 t/f.java, line(s) 41,76 t/g.java, line(s) 56,114 t/j.java, line(s) 96,99 t/k.java, line(s) 97 u/a.java, line(s) 63,72,130,140 u/e.java, line(s) 36,68 u3/i.java, line(s) 25 ua/a.java, line(s) 15,20 v0/e.java, line(s) 24,26,35,37,46,48,57,59,68,70 v9/b0.java, line(s) 29,37,75,97 v9/d0.java, line(s) 24,46,87 v9/i0.java, line(s) 12 v9/v.java, line(s) 177,184,193,200,210,224,231,327 va/d.java, line(s) 20 va/g.java, line(s) 67,74,270 w4/a.java, line(s) 79,88,104,108 wa/c.java, line(s) 120 x1/e.java, line(s) 36,65,72,75,92,97,102,107,112 x3/b.java, line(s) 12 x3/d.java, line(s) 12 x3/f.java, line(s) 12 x3/h.java, line(s) 12 x4/a.java, line(s) 107,82 y/i.java, line(s) 23 z4/c.java, line(s) 10,17,30,37,9,16,24,27,41,42,48,49 z5/i.java, line(s) 8,14,17
信息 此应用程序将数据复制到剪贴板。敏感数据不应复制到剪贴板,因为其他应用程序可以访问它
此应用程序将数据复制到剪贴板。敏感数据不应复制到剪贴板,因为其他应用程序可以访问它 https://github.com/OWASP/owasp-mstg/blob/master/Document/0x04b-Mobile-App-Security-Testing.md#clipboard Files: aa/b.java, line(s) 4,46 aa/p0.java, line(s) 11,1904 ba/f.java, line(s) 5,46 db/b.java, line(s) 5,957 db/d.java, line(s) 5,732 fb/g.java, line(s) 6,318 org/telegram/messenger/AndroidUtilities.java, line(s) 12,379 org/telegram/ui/Cells/g5.java, line(s) 8,1791 org/telegram/ui/Components/ChatActivityEnterView.java, line(s) 12,2144 org/telegram/ui/Components/b90.java, line(s) 11,2018 org/telegram/ui/Components/kx.java, line(s) 6,514 org/telegram/ui/Components/mh0.java, line(s) 8,389 org/telegram/ui/Components/nv.java, line(s) 13,800 org/telegram/ui/Components/qz.java, line(s) 8,575 org/telegram/ui/Components/zn.java, line(s) 10,887 org/telegram/ui/ProfileActivity.java, line(s) 11,6444,6493 org/telegram/ui/b91.java, line(s) 5,359 org/telegram/ui/ie1.java, line(s) 5,180 org/telegram/ui/k6.java, line(s) 4,136 org/telegram/ui/qb1.java, line(s) 6,429 org/telegram/ui/rh.java, line(s) 15,11139 org/telegram/ui/t20.java, line(s) 4,190 org/telegram/ui/wz0.java, line(s) 4,108 org/telegram/ui/yh0.java, line(s) 4,548 pa/c.java, line(s) 388,388
信息 此应用侦听剪贴板更改。一些恶意软件也会监听剪贴板更改
此应用侦听剪贴板更改。一些恶意软件也会监听剪贴板更改 https://github.com/OWASP/owasp-mstg/blob/master/Document/0x04b-Mobile-App-Security-Testing.md#clipboard Files: org/telegram/ui/m71.java, line(s) 50,212,231,5
安全 此应用程序可能具有Root检测功能
此应用程序可能具有Root检测功能 https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05j-Testing-Resiliency-Against-Reverse-Engineering.md#testing-root-detection-mstg-resilience-1 Files: f6/g.java, line(s) 307,307,308 k5/t.java, line(s) 26
安全 此应用程序使用SSL Pinning 来检测或防止安全通信通道中的MITM攻击
此应用程序使用SSL Pinning 来检测或防止安全通信通道中的MITM攻击 https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05g-Testing-Network-Communication.md#testing-custom-certificate-stores-and-certificate-pinning-mstg-network-4 Files: s8/w.java, line(s) 287,276,286,285,285
安全 Firebase远程配置已禁用
Firebase远程配置URL ( https://firebaseremoteconfig.googleapis.com/v1/projects/718227292047/namespaces/firebase:fetch?key=AIzaSyDgfHzB0cppfDz8bCBJ4_vXxEqucxnKFz8 ) 已禁用。响应内容如下所示: { "state": "NO_TEMPLATE" }