移动应用安全检测报告：
安全基线评分
安全基线评分 43/100
综合风险等级
风险等级评定
- A
- B
- C
- F
漏洞与安全项分布（%）
隐私风险
11
检测到的第三方跟踪器数量
检测结果分布
高危安全漏洞
8
中危安全漏洞
19
安全提示信息
4
已通过安全项
3
重点安全关注
0
高危安全漏洞 域配置不安全地配置为允许明文流量到达范围内的这些域。
Scope: stats.adultswim.com
高危安全漏洞 如果一个应用程序使用WebView.loadDataWithBaseURL方法来加载一个网页到WebView，那么这个应用程序可能会遭受跨站脚本攻击
如果一个应用程序使用WebView.loadDataWithBaseURL方法来加载一个网页到WebView，那么这个应用程序可能会遭受跨站脚本攻击 https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05h-Testing-Platform-Interaction.md#static-analysis-7 Files: com/adobe/mobile/MessageFullScreen.java, line(s) 54,13,14 com/braze/ui/inappmessage/views/InAppMessageHtmlBaseView.java, line(s) 258,12 com/coroutines/ui/inappmessage/views/InAppMessageHtmlBaseView.java, line(s) 252,12 com/tapjoy/TJAdUnit.java, line(s) 144,471,856,26,27 com/tapjoy/TJOfferwallDiscoverView.java, line(s) 52,6,7 com/tapjoy/TJWebViewActivity.java, line(s) 41,279,11,12 com/unity3d/services/core/webview/WebViewApp.java, line(s) 160,9,54,60,74,100
高危安全漏洞 已启用远程WebView调试
已启用远程WebView调试 https://github.com/OWASP/owasp-mstg/blob/master/Document/0x04c-Tampering-and-Reverse-Engineering.md#debugging-and-tracing Files: com/ironsource/mediationsdk/testSuite/webView/TestSuiteWebViewWrapper.java, line(s) 118,9,10 com/tapjoy/TapjoyLog.java, line(s) 23,7
高危安全漏洞 该文件是World Writable。任何应用程序都可以写入文件
该文件是World Writable。任何应用程序都可以写入文件 https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#testing-local-storage-for-sensitive-data-mstg-storage-1-and-mstg-storage-2 Files: com/appsflyer/AppsFlyerLib.java, line(s) 495 com/ironsource/mediationsdk/utils/IronSourceUtils.java, line(s) 465 com/prime31/GoogleIABPluginBase.java, line(s) 144
高危安全漏洞 启用了调试配置。生产版本不能是可调试的
启用了调试配置。生产版本不能是可调试的 https://github.com/OWASP/owasp-mstg/blob/master/Document/0x04c-Tampering-and-Reverse-Engineering.md#debugging-and-tracing Files: com/zendesk/gallery/BuildConfig.java, line(s) 3,8
高危安全漏洞 不安全的Web视图实现。Web视图忽略SSL证书错误并接受任何SSL证书。此应用程序易受MITM攻击
不安全的Web视图实现。Web视图忽略SSL证书错误并接受任何SSL证书。此应用程序易受MITM攻击 https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05g-Testing-Network-Communication.md#webview-server-certificate-verification Files: com/onevcat/uniwebview/UniWebViewClient.java, line(s) 143,134
高危安全漏洞 应用程序使用带PKCS5/PKCS7填充的加密模式CBC。此配置容易受到填充oracle攻击。
应用程序使用带PKCS5/PKCS7填充的加密模式CBC。此配置容易受到填充oracle攻击。 https://github.com/OWASP/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#identifying-insecure-andor-deprecated-cryptographic-algorithms-mstg-crypto-4 Files: com/ironsource/mediationsdk/utils/IronSourceAES.java, line(s) 69,135
高危安全漏洞 应用程序包含隐私跟踪程序
此应用程序有多个11隐私跟踪程序。跟踪器可以跟踪设备或用户，是终端用户的隐私问题。
中危安全漏洞 应用程序已启用明文网络流量
[android:usesCleartextTraffic=true] 应用程序打算使用明文网络流量，例如明文HTTP，FTP协议，DownloadManager和MediaPlayer。针对API级别27或更低的应用程序，默认值为“true”。针对API级别28或更高的应用程序，默认值为“false”。避免使用明文流量的主要原因是缺乏机密性，真实性和防篡改保护；网络攻击者可以窃听传输的数据，并且可以在不被检测到的情况下修改它。
中危安全漏洞 应用程序数据可以被备份
[android:allowBackup=true] 这个标志允许任何人通过adb备份你的应用程序数据。它允许已经启用了USB调试的用户从设备上复制应用程序数据。
中危安全漏洞 Activity (com.unity3d.player.UnityPlayerActivity) 未被保护。
[android:exported=true] 发现 Activity与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。
中危安全漏洞 Broadcast Receiver (com.unity.androidnotifications.UnityNotificationManager) 未被保护。
[android:exported=true] 发现 Broadcast Receiver与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。
中危安全漏洞 Broadcast Receiver (com.unity.androidnotifications.UnityNotificationRestartOnBootReceiver) 未被保护。
[android:exported=true] 发现 Broadcast Receiver与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。
中危安全漏洞 Service (com.google.android.gms.messaging.cpp.MessageForwardingService) 受权限保护, 但是应该检查权限的保护级别。
Permission: android.permission.BIND_JOB_SERVICE [android:exported=true] 发现一个 Service被共享给了设备上的其他应用程序，因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此，应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险，一个恶意应用程序可以请求并获得这个权限，并与该组件交互。如果它被设置为签名，只有使用相同证书签名的应用程序才能获得这个权限。
中危安全漏洞 Broadcast Receiver (com.google.firebase.iid.FirebaseInstanceIdReceiver) 受权限保护, 但是应该检查权限的保护级别。
Permission: com.google.android.c2dm.permission.SEND [android:exported=true] 发现一个 Broadcast Receiver被共享给了设备上的其他应用程序，因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此，应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险，一个恶意应用程序可以请求并获得这个权限，并与该组件交互。如果它被设置为签名，只有使用相同证书签名的应用程序才能获得这个权限。
中危安全漏洞 Service (com.google.android.gms.auth.api.signin.RevocationBoundService) 受权限保护, 但是应该检查权限的保护级别。
Permission: com.google.android.gms.auth.api.signin.permission.REVOCATION_NOTIFICATION [android:exported=true] 发现一个 Service被共享给了设备上的其他应用程序，因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此，应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险，一个恶意应用程序可以请求并获得这个权限，并与该组件交互。如果它被设置为签名，只有使用相同证书签名的应用程序才能获得这个权限。
中危安全漏洞 文件可能包含硬编码的敏感信息，如用户名、密码、密钥等
文件可能包含硬编码的敏感信息，如用户名、密码、密钥等 https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#checking-memory-for-sensitive-data-mstg-storage-10 Files: bo/content/SdkAuthenticationCache.java, line(s) 88 bo/coroutines/SdkAuthenticationCache.java, line(s) 85 com/adobe/mobile/AnalyticsTrackBeacon.java, line(s) 9,10,11,12 com/adobe/mobile/AnalyticsTrackCoordinateSpace.java, line(s) 10,11,12 com/adobe/mobile/AnalyticsTrackLifetimeValueIncrease.java, line(s) 12,13,10 com/adobe/mobile/AnalyticsTrackLocation.java, line(s) 11,19,13,14,15,16,17,18,20 com/adobe/mobile/AnalyticsTrackTimedAction.java, line(s) 12,13,235 com/adobe/mobile/AudienceManagerWorker.java, line(s) 28,27,25,21,22,19,20,30,23,24,26 com/adobe/mobile/Config.java, line(s) 12 com/adobe/mobile/Constants.java, line(s) 4,5,7,8,6,103,104,98 com/adobe/mobile/Lifecycle.java, line(s) 20 com/adobe/mobile/MediaAnalytics.java, line(s) 28,11,12,14,15,16,17,18,21,22,23,24,25,26,35,27,33,38,39,40,45,46,47,48,49,37 com/adobe/mobile/MessageMatcher.java, line(s) 8 com/adobe/mobile/Messages.java, line(s) 17 com/adobe/mobile/MobileConfig.java, line(s) 45,46,59,43,47,44,48,49,50,51,52,53,54,55,56,57,58,60,61,62,63,64,65,66,67 com/adobe/mobile/ReferrerHandler.java, line(s) 19,20,21 com/adobe/mobile/RequestBuilder.java, line(s) 10 com/adobe/mobile/StaticMethods.java, line(s) 42,43,52,55,56,44,41 com/amplitude/api/AmplitudeClient.java, line(s) 36,38,39,40,41,42,43,45 com/appboy/Constants.java, line(s) 34,44,53,37,38,68,93,94,42,43,95,40,51,36,52,54,62,50,75,60,78,25,11,12,16,17,18,35,81,77,39,49,55,61,74,58,76,46 com/appboy/enums/CardKey.java, line(s) 56,57,60,59,58 com/appboy/models/outgoing/AttributionData.java, line(s) 17,15,16,18 com/appboy/models/outgoing/FacebookUser.java, line(s) 15,16,17,18,20,21,22,23,26,24,25,19 com/appboy/models/outgoing/TwitterUser.java, line(s) 11,12,13,15,16,17,14,18 com/appboy/unity/configuration/UnityConfigurationProvider.java, line(s) 10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26 com/appsflyer/AFScreenManager.java, line(s) 10 com/appsflyer/AppsFlyerProperties.java, line(s) 14 com/braze/Constants.java, line(s) 50,56,68,48,49,84,30,31,54,55,32,52,63,47,67,69,77,62,91,75,94,37,12,13,17,18,19,46,97,93,51,61,70,76,90,73,92,58 com/braze/configuration/BrazeConfig.java, line(s) 1054,1054 com/braze/models/inappmessage/InAppMessageHtml.java, line(s) 17,18 com/braze/push/BrazeNotificationUtils.java, line(s) 50 com/braze/push/BrazePushReceiver.java, line(s) 34,27,26,37,29,38,31 com/braze/support/StringUtils.java, line(s) 30 com/braze/ui/contentcards/ContentCardsFragment.java, line(s) 48,49,52,53 com/braze/ui/inappmessage/listeners/DefaultInAppMessageWebViewClientListener.java, line(s) 31 com/comscore/streaming/Constants.java, line(s) 9,10 com/comscore/utils/Constants.java, line(s) 4,5,6,7,8,9,10,14,26,28,29,37,38,40,42,43,45,49,50,51,52,53,54,55,56,61,62,64,68,69,70,72,73,75 com/comscore/utils/InstallReferrerReceiver.java, line(s) 12 com/comscore/utils/Storage.java, line(s) 11 com/coroutines/Constants.java, line(s) 50,56,68,48,49,84,30,31,54,55,32,52,63,47,67,69,77,62,91,75,94,37,12,13,17,18,19,46,97,93,51,61,70,76,90,73,92,58 com/coroutines/configuration/BrazeConfig.java, line(s) 1050,1050 com/coroutines/models/inappmessage/InAppMessageHtml.java, line(s) 17,18 com/coroutines/push/BrazeNotificationUtils.java, line(s) 50 com/coroutines/push/BrazePushReceiver.java, line(s) 36,29,28,39,31,40,33 com/coroutines/support/StringUtils.java, line(s) 29 com/coroutines/ui/contentcards/ContentCardsFragment.java, line(s) 51,52,55,56 com/coroutines/ui/inappmessage/listeners/DefaultInAppMessageWebViewClientListener.java, line(s) 31 com/ironsource/adapters/adcolony/AdColonyAdapter.java, line(s) 491 com/ironsource/adapters/ironsource/IronSourceAdapter.java, line(s) 78,46,45,673,204 com/ironsource/adapters/supersonicads/SupersonicAdsAdapter.java, line(s) 69,371,198 com/ironsource/adapters/tapjoy/TapjoyAdapter.java, line(s) 298,330,367,506,99 com/ironsource/adapters/unityads/UnityAdsAdapter.java, line(s) 794,355,125 com/ironsource/mediationsdk/C0042c.java, line(s) 221,336 com/ironsource/mediationsdk/C0080c.java, line(s) 221,336 com/ironsource/mediationsdk/CachedResponse.java, line(s) 37 com/ironsource/mediationsdk/InitConfig.java, line(s) 43 com/ironsource/mediationsdk/adunit/adapter/utility/AdOptionsPosition.java, line(s) 12 com/ironsource/mediationsdk/server/ServerURL.java, line(s) 24,49 com/ironsource/mediationsdk/utils/IronSourceConstants.java, line(s) 93,104 com/ironsource/mediationsdk/y.java, line(s) 1424,1407 com/ironsource/unity/androidbridge/AndroidBridgeConstants.java, line(s) 29,30 com/kontagent/AppConstants.java, line(s) 18,17,11,19,20,21,16,22,23,24,25,27,26,28 com/kontagent/session/ISession.java, line(s) 9,10,11,12,15,16,17,18,19,20 com/tapjoy/TapjoyConstants.java, line(s) 36 com/unity/androidnotifications/UnityNotificationManager.java, line(s) 32,34 com/unity3d/ads/metadata/InAppPurchaseMetaData.java, line(s) 13 com/unity3d/services/ads/gmascar/utils/ScarConstants.java, line(s) 4,5,6,8,9 com/unity3d/services/core/configuration/ExperimentObject.java, line(s) 7,8 com/unity3d/services/core/device/reader/DeviceInfoReaderFilterProvider.java, line(s) 11,12 com/unity3d/services/core/device/reader/JsonStorageKeyNames.java, line(s) 4,6,7,8,10,11,12,13,9,14,5,15,16,17 com/unity3d/services/core/properties/SdkProperties.java, line(s) 28
中危安全漏洞 SHA-1是已知存在哈希冲突的弱哈希
SHA-1是已知存在哈希冲突的弱哈希 https://github.com/OWASP/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#identifying-insecure-andor-deprecated-cryptographic-algorithms-mstg-crypto-4 Files: com/adcolony/sdk/d1.java, line(s) 9 com/adcolony/sdk/z0.java, line(s) 317 com/appsflyer/r.java, line(s) 12 com/kontagent/util/GUIDUtil.java, line(s) 216,232 com/tapjoy/internal/u7.java, line(s) 171 com/unity3d/services/core/device/Device.java, line(s) 165
中危安全漏洞 可能存在跨域漏洞。在 WebView 中启用从 URL 访问文件可能会泄漏文件系统中的敏感信息
可能存在跨域漏洞。在 WebView 中启用从 URL 访问文件可能会泄漏文件系统中的敏感信息 https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05h-Testing-Platform-Interaction.md#static-analysis-6 Files: com/adcolony/sdk/b1.java, line(s) 668,659 com/adobe/mobile/MessageFullScreen.java, line(s) 52,51 com/braze/ui/inappmessage/views/InAppMessageHtmlBaseView.java, line(s) 154,149 com/coroutines/ui/inappmessage/views/InAppMessageHtmlBaseView.java, line(s) 151,146 com/ironsource/sdk/utils/d.java, line(s) 33,35 com/onevcat/uniwebview/UniWebView.java, line(s) 42,36 com/unity3d/services/core/webview/WebView.java, line(s) 88,101
中危安全漏洞 应用程序创建临时文件。敏感信息永远不应该被写进临时文件
应用程序创建临时文件。敏感信息永远不应该被写进临时文件 Files: com/onevcat/uniwebview/UniWebViewChromeClient.java, line(s) 96,103 com/tapjoy/internal/t7.java, line(s) 27
中危安全漏洞 不安全的Web视图实现。可能存在WebView任意代码执行漏洞
不安全的Web视图实现。可能存在WebView任意代码执行漏洞 https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05h-Testing-Platform-Interaction.md#testing-javascript-execution-in-webviews-mstg-platform-5 Files: com/ironsource/mediationsdk/testSuite/webView/TestSuiteWebViewWrapper.java, line(s) 126,123,125 com/unity3d/services/ads/webplayer/WebPlayerView.java, line(s) 539,523 com/unity3d/services/core/webview/WebView.java, line(s) 137,101
中危安全漏洞 应用程序可以读取/写入外部存储器，任何应用程序都可以读取写入外部存储器的数据
应用程序可以读取/写入外部存储器，任何应用程序都可以读取写入外部存储器的数据 https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#external-storage Files: com/ironsource/environment/h.java, line(s) 514,324 com/ironsource/mediationsdk/utils/f.java, line(s) 154,276 com/ironsource/sdk/utils/SDKUtils.java, line(s) 254 com/onevcat/uniwebview/ProviderPathConverter.java, line(s) 55 com/onevcat/uniwebview/UniWebViewChromeClient.java, line(s) 92 com/tapjoy/TapjoyCache.java, line(s) 114,115,116 com/unity3d/services/core/cache/CacheDirectory.java, line(s) 56 com/zendesk/gallery/Gallery.java, line(s) 85
中危安全漏洞 MD5是已知存在哈希冲突的弱哈希
MD5是已知存在哈希冲突的弱哈希 https://github.com/OWASP/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#identifying-insecure-andor-deprecated-cryptographic-algorithms-mstg-crypto-4 Files: com/adobe/mobile/RemoteDownload.java, line(s) 470 com/appsflyer/r.java, line(s) 27 com/braze/support/StringUtils.java, line(s) 134 com/comscore/android/id/IdHelperAndroid.java, line(s) 178 com/comscore/utils/Utils.java, line(s) 102 com/coroutines/support/StringUtils.java, line(s) 131 com/ironsource/mediationsdk/utils/IronSourceUtils.java, line(s) 394 com/ironsource/sdk/controller/w.java, line(s) 24 com/ironsource/sdk/utils/SDKUtils.java, line(s) 175 com/kontagent/util/GUIDUtil.java, line(s) 191
中危安全漏洞 IP地址泄露
IP地址泄露 Files: com/appsflyer/y.java, line(s) 110 com/ironsource/adapters/ironsource/IronSourceAdapter.java, line(s) 51,383 com/ironsource/adapters/supersonicads/SupersonicAdsAdapter.java, line(s) 31,148,221 com/ironsource/mediationsdk/config/VersionInfo.java, line(s) 13 com/ironsource/mediationsdk/utils/IronSourceUtils.java, line(s) 58,433 com/ironsource/mediationsdk/y.java, line(s) 206
中危安全漏洞 应用程序使用SQLite数据库并执行原始SQL查询。原始SQL查询中不受信任的用户输入可能会导致SQL注入。敏感信息也应加密并写入数据库
应用程序使用SQLite数据库并执行原始SQL查询。原始SQL查询中不受信任的用户输入可能会导致SQL注入。敏感信息也应加密并写入数据库 https://github.com/OWASP/owasp-mstg/blob/master/Document/0x04h-Testing-Code-Quality.md#injection-flaws-mstg-arch-2-and-mstg-platform-2 Files: com/adcolony/sdk/n.java, line(s) 5,257,274 com/adcolony/sdk/o.java, line(s) 6,268 com/adcolony/sdk/p.java, line(s) 6,20 com/adobe/mobile/AnalyticsTrackTimedAction.java, line(s) 5,64,68,144,156 com/amplitude/api/DatabaseHelper.java, line(s) 6,7,8,9,10,255,256,257,258,446,447,448,449,477,489,490 com/ironsource/b/a.java, line(s) 5,6,121,126 com/ironsource/environment/f.java, line(s) 6,7,25,47,111 com/kontagent/queue/TransferQueue.java, line(s) 5,6,7,8,135,151,172 com/tapjoy/internal/d.java, line(s) 5,35,70,122
中危安全漏洞 应用程序使用不安全的随机数生成器
应用程序使用不安全的随机数生成器 https://github.com/OWASP/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#weak-random-number-generators Files: bo/content/d1.java, line(s) 5 bo/coroutines/d1.java, line(s) 5 com/braze/support/IntentUtils.java, line(s) 12 com/coroutines/support/IntentUtils.java, line(s) 12 com/ironsource/mediationsdk/utils/e.java, line(s) 6 com/kontagent/deps/G.java, line(s) 3 com/kontagent/network/asynchttpclient/SimpleMultipartEntity.java, line(s) 11 com/unity3d/services/core/request/metrics/SDKMetrics.java, line(s) 9
中危安全漏洞 此应用可能包含硬编码机密信息
从应用程序中识别出以下机密确保这些不是机密或私人信息 凭证信息=> "com.google.android.gms.games.APP_ID" : "\ 843889502734" Google_Drive_API_Key: AIzaSyDEHw9afV9usUCCmee85Lb86U_syEXxl2g Telegram_Bot_API_Key: 11:AALQQ_XXgXXgXXgXXgXXgXXgXXgXXgXXgXX "PASSWORD" : "Password" "USERNAME" : "Username" "com_appboy_api_key" : "5caf550e-fec6-43bd-bc26-49fd68056ea9" "com_appboy_firebase_cloud_messaging_sender_id" : "843889502734" "com_braze_image_is_read_tag_key" : "com_appboy_image_is_read_tag_key" "com_braze_image_lru_cache_image_url_key" : "com_braze_image_lru_cache_image_url_key" "com_braze_image_resize_tag_key" : "com_appboy_image_resize_tag_key" "firebase_database_url" : "https://api-project-843889502734.firebaseio.com" "google_api_key" : "AIzaSyDfGGbrSdvtwgNFTdi49WlHz3RHeBljtK4" "google_app_id" : "1:843889502734:android:aa337a06342162fa" "google_crash_reporting_api_key" : "AIzaSyDfGGbrSdvtwgNFTdi49WlHz3RHeBljtK4" "PASSWORD" : "Adgangskode" "USERNAME" : "Brugernavn" "PASSWORD" : "Passwort" "USERNAME" : "Nutzername" "PASSWORD" : "Wachtwoord" "USERNAME" : "Gebruikersnaam" "PASSWORD" : "Senha" nca9HgFB0fW7Y14h29Jlo91ghYPl0hAEvrAIthtOgQ3pOsqTQNroBvo3bSMgHFzZM n5MsI+yMRQ+hDKXJioaldXgjUkK642M4UwtBV8ob2xJNDd2ZhwLnoQdeXeGADbkpy 30b78d544b1c4be3a5df80f3b2123a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nIFAGbHrQgLKm+a/sRxmPUDgH3KKHOVj4utWp+UhnMJbulHheb4mjUcAwhmahRWa6 nADA5MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRkwFwYDVQQDExBBbWF6 e41ffe76e8677fa03aca27ca133fde958f31fe05 nb24gUm9vdCBDQSAxMB4XDTE1MDUyNjAwMDAwMFoXDTM4MDExNzAwMDAwMFowOTEL iVBORw0KGgoAAAANSUhEUgAAAAgAAAANCAYAAACUwi84AAAAAXNSR0IArs4c6QAAAHlJREFUGBljZsAOBIHCu4FYC5u0GFDwAhD/B+IN6ApkgAI3oJIrgTQrsgJlIOc+VHIukGZCltQGcp5BJScCaUZkSWMg5w1UshlZAsa+A5XcCRNApwmaANKA7IYJQD6KG2Am4vUFTBHecIApQglJrHYBVYLiYhMQnwAAeiYfS1LRd+4AAAAASUVORK5CYII= iVBORw0KGgoAAAANSUhEUgAAAA0AAAANCAYAAABy6+R8AAAAAXNSR0IArs4c6QAAAHtJREFUKBWVkksKwCAMREOh99+3y97GU3iTdp6tRcUoBgbJfEgCmpkF4RA2YVTo+PDbKdzCJXhBeHR8BJMxE71gGah0T/B4hqVqDbvY0QZfrF41ip3d+geZkAO89MMqV4xyTieVAW6Z3tQG6CmP94U319dXfwT+pb9HIDwrxDUcBOiFBQAAAABJRU5ErkJggg== 026ae9c9824b3e483fa6c71fa88f57ae27816141 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 nAYYwHQYDVR0OBBYEFIQYzIU07LwMlJQuCFmcx7IQTgoIMA0GCSqGSIb3DQEBCwUA iVBORw0KGgoAAAANSUhEUgAAABAAAAAaCAYAAAC+aNwHAAAAAXNSR0IArs4c6QAAAPZJREFUOBFjYCAdWAG1PADiCUDMBMQkAReg6i9A/B+KZ5Ki2w+o+AeSZpAhF4g1IBKo8Dea5utAvjQxBqQCFf1F03wOyBclRnMRmkaQs48CsQAxmuuxaN4DFOMmRnMPFs0bgWLshDSD4hUUNbBogtHLgGIshDSDFCzFonkWUIxgggE5bQMWzX1AMYIAFCi7gRjmXBjdSFAnVMFOLJqLidUM8hvIRooALi80kGIqRYEIs4iiaIQZQlFCghkConuBGBadMJqopIxsSD0WQ4jOTDCDcGVnfpgCYmiKChSYBdiKtGtASaKKNJghFBWqMEMoKtZhhqBULADcM3nkekaNxwAAAABJRU5ErkJggg== no/ufQJVtMVT8QtPHRh8jrdkPSHCa2XV4cdFyQzR1bldZwgJcJmApzyMZFo6IQ6XU nU5PMCCjjmCXPI6T53iHTfIUJrU6adTrCC2qJeHZERxhlbI1Bjjt/msv0tadQ1wUs bb2cf0647ba654d7228dd3f9405bbc6a nN+gDS63pYaACbvXy8MWy7Vu33PqUXHeeE6V/Uq2V8viTO96LXFvKWlJbYK8U90vv 37a6259cc0c1dae299a7866489dff0bd nMAkGA1UEBhMCVVMxDzANBgNVBAoTBkFtYXpvbjEZMBcGA1UEAxMQQW1hem9uIFJv nVOujw5H5SNz/0egwLX0tdHA114gk957EWW67c4cX8jJGKLhD+rcdqsq08p8kDi1L nb3QgQ0EgMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALJ4gHHKeNXj 7bf3a1e7bbd31e612eda3310c2cdb8075c43c6b5 MIIDQTCCAimgAwIBAgITBmyfz5m/jAo54vB4ikPmljZbyjANBgkqhkiG9w0BAQsF
安全提示信息 应用程序记录日志信息,不得记录敏感信息
应用程序记录日志信息,不得记录敏感信息 https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#logs Files: bitter/jnibridge/JNIBridge.java, line(s) 53 com/adcolony/sdk/AdColonyAppOptions.java, line(s) 58,67 com/adcolony/sdk/g0.java, line(s) 60,78,82,203,66,271,72 com/adcolony/sdk/s0.java, line(s) 111,142,127 com/adobe/mobile/StaticMethods.java, line(s) 893,896,902,905,911,914 com/amplitude/api/AmplitudeLog.java, line(s) 22,29,40,51,62,69,73,98,105,112,119,126,133,140,147 com/appsflyer/AFLogger.java, line(s) 33,108,79,52,61,68 com/appsflyer/cache/CacheManager.java, line(s) 79,82,103,138,142,151,159,172,179,191 com/bigpixelstudios/deeplink/BPSDeeplinkActivity.java, line(s) 9,10,11,12,13,15,18,21,23 com/braze/support/BrazeLogger.java, line(s) 209,211,444,447,233,465,290,292,453,456,361,363,482,484,398,400,462,471,474 com/comscore/analytics/Core.java, line(s) 230,257,412,442 com/comscore/applications/KeepAlive.java, line(s) 43,53,57,74,86,99,111 com/comscore/measurement/MeasurementDispatcher.java, line(s) 49,123,107 com/comscore/metrics/Request.java, line(s) 71 com/comscore/streaming/StreamSense.java, line(s) 48,101,143,172,226,263,342,379,398,411,427,437,447,460,470,500,514,533,610,644 com/comscore/streaming/StreamSensePlaylist.java, line(s) 57,64,88,95 com/comscore/streaming/StreamSenseVideoView.java, line(s) 95,103,141,161,177,190,238,245,260,267,303,311,202 com/comscore/streaming/d.java, line(s) 25 com/comscore/streaming/m.java, line(s) 30,43 com/comscore/streaming/plugin/StreamSensePlugin.java, line(s) 300 com/comscore/utils/CSLog.java, line(s) 8,20,38 com/comscore/utils/CacheFlusher.java, line(s) 64,71,80 com/comscore/utils/Connectivity.java, line(s) 34 com/comscore/utils/ConnectivityChangeReceiver.java, line(s) 26,45,78,88,96,103 com/comscore/utils/CustomExceptionHandler.java, line(s) 31,38 com/comscore/utils/DispatchQueue.java, line(s) 45 com/comscore/utils/FileUtils.java, line(s) 20,119 com/comscore/utils/InstallReferrerReceiver.java, line(s) 20,30 com/comscore/utils/OfflineMeasurementsCache.java, line(s) 92,95,96,130,151,188,198,211,300,303,325,395,397,103,108 com/comscore/utils/Utils.java, line(s) 31 com/comscore/utils/task/TaskExecutor.java, line(s) 82 com/comscore/utils/task/a.java, line(s) 88 com/coroutines/support/BrazeLogger.java, line(s) 206,208,441,444,230,462,287,289,450,453,358,360,479,481,395,397,459,468,471 com/iab/omid/library/adcolony/d/c.java, line(s) 18,11 com/iab/omid/library/ironsrc/utils/d.java, line(s) 18,11 com/ironsource/a/b.java, line(s) 42 com/ironsource/adapters/ironsource/IronSourceAdapter.java, line(s) 649 com/ironsource/adapters/supersonicads/SupersonicAdsAdapter.java, line(s) 351 com/ironsource/adapters/tapjoy/TapjoyAdapter.java, line(s) 179,183 com/ironsource/b/a.java, line(s) 85,107 com/ironsource/environment/a.java, line(s) 37,319 com/ironsource/environment/e.java, line(s) 91,188,200,205,206 com/ironsource/environment/k.java, line(s) 66 com/ironsource/lifecycle/a/a.java, line(s) 71 com/ironsource/mediationsdk/IronSource.java, line(s) 650 com/ironsource/mediationsdk/ads/nativead/LevelPlayNativeAd.java, line(s) 62 com/ironsource/mediationsdk/bidding/d.java, line(s) 46 com/ironsource/mediationsdk/integration/IntegrationHelper.java, line(s) 20,24,16 com/ironsource/mediationsdk/logger/a.java, line(s) 39,32,28,34 com/ironsource/mediationsdk/y.java, line(s) 468,470,478,480,1361,1384 com/ironsource/sdk/a/d.java, line(s) 39 com/ironsource/sdk/b/b.java, line(s) 36,62,101 com/ironsource/sdk/c/c.java, line(s) 117,186 com/ironsource/sdk/controller/A.java, line(s) 328,336,416,921,1016,1036,1065,1085,1107,1127,1153,1173,1202,1359,1377,2035,1814 com/ironsource/sdk/service/Connectivity/a.java, line(s) 50 com/ironsource/sdk/service/Connectivity/e.java, line(s) 82,96 com/ironsource/sdk/service/d.java, line(s) 48 com/ironsource/sdk/utils/Logger.java, line(s) 12,18,24,30,40,48,53,59,65,71 com/ironsource/unity/androidbridge/AndroidBridge.java, line(s) 1072,1211 com/kontagent/KAnalyticsReceiver.java, line(s) 43,51 com/kontagent/Kontagent.java, line(s) 62,95,155,192,197,271,281,72,175 com/kontagent/KontagentLog.java, line(s) 29,33,60,75 com/kontagent/configuration/DynamicConfigurationServiceImpl.java, line(s) 39 com/kontagent/configuration/SessionConfiguration.java, line(s) 74,84 com/kontagent/connectivity/ConnectivityTracker.java, line(s) 45,48,55,60,79,85 com/kontagent/deps/B.java, line(s) 83 com/kontagent/deps/C0090be.java, line(s) 169,176 com/kontagent/deps/C0115cc.java, line(s) 67 com/kontagent/deps/C0119e.java, line(s) 57 com/kontagent/deps/C0128be.java, line(s) 282,289 com/kontagent/deps/C0153cc.java, line(s) 67 com/kontagent/deps/C0157e.java, line(s) 57 com/kontagent/deps/P.java, line(s) 104,130 com/kontagent/deps/aN.java, line(s) 39,47,83 com/kontagent/facebook/KontagentFBLib.java, line(s) 42,45 com/kontagent/fingerprint/FingerprintBuilder.java, line(s) 30,41 com/kontagent/fingerprint/FingerprintIpHelperImpl.java, line(s) 38,57 com/kontagent/fingerprint/FingerprintServiceImpl.java, line(s) 30 com/kontagent/queue/MessageStackMonitor.java, line(s) 22,41,67 com/kontagent/queue/TransferQueue.java, line(s) 94,99,104,265,269,273,290,318,325,342,368,386,412,419,488,494,501,107,115,128,143,163,187,198,276,330,435,210,219,345,355,328 com/kontagent/session/Session.java, line(s) 173,175,182,184,354,357,400,524,723,779,853,864,891,893,115,129,166,216,255,277,425,907,340,365,875 com/kontagent/util/GUIDUtil.java, line(s) 210,83,91,153 com/kontagent/util/NetworkUtil.java, line(s) 33,79,84,89,130,133,40,63,68,107,112,122 com/kontagent/util/SharedPreferencesMigrationTransformer.java, line(s) 29,32,51,55 com/kontagent/util/Waiter.java, line(s) 31,42 com/onevcat/uniwebview/Logger.java, line(s) 33,30 com/prime31/ActivityProxyObjectHelper.java, line(s) 66,75,64,73 com/prime31/GoogleIABPlugin.java, line(s) 35,44,50,59,65,74,80,90,101,108,117,146,153,192,196,205,218 com/prime31/GoogleIABPluginBase.java, line(s) 114,165,36,38,40,94,100,102,104,118,146,182,74 com/prime31/GoogleIABProxyActivity.java, line(s) 50,56,58,25,34,36,41,42 com/prime31/IABConstants.java, line(s) 11,17,23,40 com/prime31/Inventory.java, line(s) 33,80,99,95 com/prime31/KontagentPlugin.java, line(s) 198,183,28,30,32,46 com/prime31/UnityPlayerNativeActivity.java, line(s) 37 com/tapjoy/TJActivity.java, line(s) 107 com/tapjoy/TJAdUnit.java, line(s) 283,301,314,381,425,444,452,470,478,561,579,591,687,819,851,954,1272,141,152,260,270,327,1029,1160,136,501,727,735,1148,1208,1242,1018,1040,874,934,1264 com/tapjoy/TJAdUnitActivity.java, line(s) 35,57,110,117,140,201,209,215,228,241,247,127,177 com/tapjoy/TJAdUnitJSBridge.java, line(s) 382,388,700,721,744,753,893,959,1007,1030,1036,323,357,483,489,610,646,949,354,173,414,867,887,897,938,989,1088 com/tapjoy/TJAppSetId.java, line(s) 22,32 com/tapjoy/TJCorePlacement.java, line(s) 233,256,314,322,482,486,506,660,281,545,548,552,72,269,295,301,309,337,448,473,614,630,644,675,572,576 com/tapjoy/TJCurrency.java, line(s) 84,86,93,103,125,130,152,158,185,187,197,226,89,140,190 com/tapjoy/TJEventOptimizer.java, line(s) 64,75,120,81,95,31,111 com/tapjoy/TJInstallReferrer.java, line(s) 23,32,43,47,49,62,67,71,76,81,86,98,102,105,107,109 com/tapjoy/TJOfferwallDiscoverView.java, line(s) 54 com/tapjoy/TJPlacement.java, line(s) 104,115,143,79,134,82 com/tapjoy/TJPlacementManager.java, line(s) 43,49,164,172 com/tapjoy/TJSplitWebView.java, line(s) 200,205,250,472,231,268 com/tapjoy/TJWebViewActivity.java, line(s) 40,48,190,236 com/tapjoy/TJWebViewJSInterface.java, line(s) 119,123,42,57,84,112,107 com/tapjoy/Tapjoy.java, line(s) 54 com/tapjoy/TapjoyAdIdClient.java, line(s) 38 com/tapjoy/TapjoyAppSettings.java, line(s) 27,36,101,109,53,57,78,95,117,124,58 com/tapjoy/TapjoyCache.java, line(s) 70,99,124,139,147,161,208,211,237,242,298,299,300,301,79,89,93,126,142,155,183,197 com/tapjoy/TapjoyCacheMap.java, line(s) 26,60 com/tapjoy/TapjoyCachedAssetData.java, line(s) 39,49 com/tapjoy/TapjoyConnectCore.java, line(s) 647,664,665,838,971,976,1082,1095,1101,1201,1288,1317,1322,1326,1547,1579,1602,200,445,602,621,652,670,722,765,1135,1139,1231,1235,1254,1260,1283,1333,1346,1447,1472,1485,1505,182,192,436,1124,1197,1413,1460,1491,1517,1522,1523,1529,1534,1535,1536,1552,1576,250,256,379,385,403,409,1252,1258,1164,1399,1404,1497 com/tapjoy/TapjoyGpsHelper.java, line(s) 87,89,92,93,102,104,111,112,115 com/tapjoy/TapjoyLog.java, line(s) 22 com/tapjoy/TapjoyPluginAPI.java, line(s) 89,91,93 com/tapjoy/TapjoyURLConnection.java, line(s) 17,28,25 com/tapjoy/TapjoyUtil.java, line(s) 169,184,185,186,337,65,274,299 com/tapjoy/internal/a.java, line(s) 393 com/tapjoy/internal/a3.java, line(s) 43 com/tapjoy/internal/l4.java, line(s) 26,30,63 com/tapjoy/internal/l5.java, line(s) 22 com/tapjoy/internal/m4.java, line(s) 19 com/tapjoy/internal/n4.java, line(s) 117,119,123,134,139,160,177,181,192,199,203,211 com/tapjoy/internal/n5.java, line(s) 60 com/tapjoy/internal/p4.java, line(s) 303,310,320,326,345,352,373,379,465,517,367,296,339,70,503 com/tapjoy/internal/q9.java, line(s) 39,53,57 com/tapjoy/internal/u6.java, line(s) 108 com/tapjoy/internal/x5.java, line(s) 67,69 com/tapjoy/internal/y5.java, line(s) 31 com/unity/androidnotifications/UnityNotificationManager.java, line(s) 68,70,166,306,431 com/unity/androidnotifications/UnityNotificationUtilities.java, line(s) 58,62,67 com/unity3d/ads/UnityAdsBaseOptions.java, line(s) 23 com/unity3d/ads/metadata/InAppPurchaseMetaData.java, line(s) 27,40,54 com/unity3d/ads/metadata/MetaData.java, line(s) 42,57 com/unity3d/services/UnityServices.java, line(s) 86,138,145,150,158,164,173,182,170,179,120 com/unity3d/services/ads/UnityAdsImplementation.java, line(s) 109,81 com/unity3d/services/ads/adunit/AdUnitActivityController.java, line(s) 360,362,53,129,187,220,261,291,311,378,225 com/unity3d/services/ads/adunit/AdUnitViewHandlerFactory.java, line(s) 22 com/unity3d/services/ads/adunit/VideoPlayerHandler.java, line(s) 17,35 com/unity3d/services/ads/api/AdUnit.java, line(s) 203,209,258,261,265,268,325,328,331,334,361,111,133,156,163,339,352,364,368,408,499 com/unity3d/services/ads/api/VideoPlayer.java, line(s) 60,78,101,119,170,181 com/unity3d/services/ads/api/WebPlayer.java, line(s) 53 com/unity3d/services/ads/gmascar/adapters/ScarAdapterFactory.java, line(s) 46 com/unity3d/services/ads/gmascar/bridges/AdapterStatusBridge.java, line(s) 21,39 com/unity3d/services/ads/gmascar/bridges/InitializeListenerBridge.java, line(s) 21,40 com/unity3d/services/ads/gmascar/bridges/mobileads/MobileAdsBridge.java, line(s) 20 com/unity3d/services/ads/gmascar/bridges/mobileads/MobileAdsBridgeLegacy.java, line(s) 22 com/unity3d/services/ads/gmascar/finder/GMAInitializer.java, line(s) 53 com/unity3d/services/ads/gmascar/finder/ScarVersionFinder.java, line(s) 37,49 com/unity3d/services/ads/token/InMemoryAsyncTokenStorage.java, line(s) 146,180 com/unity3d/services/ads/token/NativeTokenGenerator.java, line(s) 41 com/unity3d/services/ads/video/VideoPlayerView.java, line(s) 55,58,82,122,127,149,192,204,238 com/unity3d/services/ads/webplayer/WebPlayerView.java, line(s) 66,76,400,402,419,515,557,615,630,644,656 com/unity3d/services/banners/BannerView.java, line(s) 133 com/unity3d/services/banners/UnityBanners.java, line(s) 335 com/unity3d/services/core/api/Cache.java, line(s) 163,177,53,129,182 com/unity3d/services/core/api/DeviceInfo.java, line(s) 144,162,183,321,347,361,414 com/unity3d/services/core/api/Intent.java, line(s) 50,64,210,234,249 com/unity3d/services/core/api/Request.java, line(s) 33,45,96,108,126,138 com/unity3d/services/core/api/Sdk.java, line(s) 17,38,54,80,86,92,98 com/unity3d/services/core/broadcast/BroadcastEventReceiver.java, line(s) 36 com/unity3d/services/core/cache/CacheDirectory.java, line(s) 25,27,67,71,81,106,110,116,123,30,60,76 com/unity3d/services/core/cache/CacheThread.java, line(s) 75 com/unity3d/services/core/cache/CacheThreadHandler.java, line(s) 40,43,47,70 com/unity3d/services/core/configuration/ConfigurationReader.java, line(s) 25 com/unity3d/services/core/configuration/ConfigurationRequestFactory.java, line(s) 38 com/unity3d/services/core/configuration/EnvironmentCheck.java, line(s) 32,45,35,48,51,54,57 com/unity3d/services/core/configuration/ExperimentObject.java, line(s) 24 com/unity3d/services/core/configuration/ExperimentsReader.java, line(s) 24 com/unity3d/services/core/configuration/InitializationNotificationCenter.java, line(s) 47 com/unity3d/services/core/configuration/InitializeEventsMetricSender.java, line(s) 42,52,60,70,165,172 com/unity3d/services/core/configuration/InitializeThread.java, line(s) 280,316,443,458,502,510,610,622,648,707,124,289,292,323,326,371,391,559,596,711,862,871,195,352,452,536 com/unity3d/services/core/configuration/PrivacyConfigurationLoader.java, line(s) 63 com/unity3d/services/core/connectivity/ConnectivityMonitor.java, line(s) 57,85,95,77,125 com/unity3d/services/core/device/AdvertisingId.java, line(s) 126,144,154 com/unity3d/services/core/device/Device.java, line(s) 167,474,523,532,287 com/unity3d/services/core/device/OpenAdvertisingId.java, line(s) 128,150,157 com/unity3d/services/core/device/Storage.java, line(s) 47,51,58 com/unity3d/services/core/device/reader/DeviceInfoReaderCompressor.java, line(s) 20,33 com/unity3d/services/core/device/reader/DeviceInfoReaderExtended.java, line(s) 46 com/unity3d/services/core/domain/task/InitializeStateConfig$doWork$2.java, line(s) 48 com/unity3d/services/core/domain/task/InitializeStateCreate$doWork$2.java, line(s) 46,55,59 com/unity3d/services/core/domain/task/InitializeStateCreateWithRemote$doWork$2.java, line(s) 46,54,58 com/unity3d/services/core/domain/task/InitializeStateError$doWork$2.java, line(s) 45 com/unity3d/services/core/domain/task/InitializeStateLoadCache$doWork$2.java, line(s) 49,63 com/unity3d/services/core/domain/task/InitializeStateLoadCache.java, line(s) 145 com/unity3d/services/core/domain/task/InitializeStateNetworkError$doWork$2.java, line(s) 46 com/unity3d/services/core/domain/task/InitializeStateNetworkError.java, line(s) 102,119 com/unity3d/services/core/log/DeviceLog.java, line(s) 68,215,222 com/unity3d/services/core/misc/JsonFlattener.java, line(s) 43 com/unity3d/services/core/misc/JsonStorage.java, line(s) 155,26,32,51,72,84,96,164,170 com/unity3d/services/core/misc/JsonStorageAggregator.java, line(s) 34 com/unity3d/services/core/misc/Utilities.java, line(s) 40,58,174 com/unity3d/services/core/misc/ViewUtilities.java, line(s) 26,35 com/unity3d/services/core/preferences/AndroidPreferences.java, line(s) 14,26,38,50,62 com/unity3d/services/core/properties/ClientProperties.java, line(s) 39,70,82,84 com/unity3d/services/core/properties/SdkProperties.java, line(s) 234,236,99 com/unity3d/services/core/reflection/GenericBridge.java, line(s) 32,47,56,62,70,76,84,91 com/unity3d/services/core/request/WebRequest.java, line(s) 84,177,183 com/unity3d/services/core/request/WebRequestRunnable.java, line(s) 91,76,95 com/unity3d/services/core/request/WebRequestThread.java, line(s) 62,124,138 com/unity3d/services/core/request/metrics/MetricCommonTags.java, line(s) 64 com/unity3d/services/core/request/metrics/MetricSender$sendMetrics$$inlined$CoroutineExceptionHandler$1.java, line(s) 21 com/unity3d/services/core/request/metrics/MetricSender$sendMetrics$1.java, line(s) 81,83 com/unity3d/services/core/request/metrics/MetricSender.java, line(s) 74,87,95 com/unity3d/services/core/request/metrics/MetricSenderWithBatch.java, line(s) 47 com/unity3d/services/core/request/metrics/SDKMetrics.java, line(s) 37,51,61,85,96 com/unity3d/services/core/sensorinfo/SensorInfoListener.java, line(s) 28 com/unity3d/services/core/timer/BaseTimer.java, line(s) 81 com/unity3d/services/core/webview/WebView.java, line(s) 190 com/unity3d/services/core/webview/WebViewApp.java, line(s) 56,101,211,256,300,350,63,67,70,87,148,163,190,292,322,363 com/unity3d/services/core/webview/WebViewUrlBuilder.java, line(s) 27 com/unity3d/services/core/webview/bridge/Invocation.java, line(s) 78 com/unity3d/services/core/webview/bridge/NativeCallback.java, line(s) 45 com/unity3d/services/core/webview/bridge/WebViewBridge.java, line(s) 91 com/unity3d/services/core/webview/bridge/WebViewBridgeInterface.java, line(s) 60,67 com/unity3d/services/core/webview/bridge/WebViewCallback.java, line(s) 50 com/unity3d/services/store/core/StoreLifecycleListener.java, line(s) 43 com/unity3d/services/store/gpbl/bridges/CommonJsonResponseBridge.java, line(s) 38 com/unity3d/services/store/gpbl/bridges/PurchaseBridge.java, line(s) 37 org/fmod/FMODAudioDevice.java, line(s) 73 org/fmod/a.java, line(s) 77
安全提示信息 应用程序可以写入应用程序目录。敏感信息应加密
应用程序可以写入应用程序目录。敏感信息应加密 Files: bo/content/a0.java, line(s) 427,427 bo/content/a5.java, line(s) 34,34 bo/content/c6.java, line(s) 588,588 bo/content/e.java, line(s) 116,116 bo/content/e1.java, line(s) 154,157 bo/content/j1.java, line(s) 143,143 bo/content/k0.java, line(s) 125,125 bo/content/k6.java, line(s) 614 bo/content/l.java, line(s) 487 bo/content/l0.java, line(s) 179,179 bo/content/l4.java, line(s) 65,65 bo/content/m.java, line(s) 344,347 bo/content/m0.java, line(s) 33,33 bo/content/n6.java, line(s) 196 bo/content/r1.java, line(s) 527,527 bo/content/t6.java, line(s) 224,227 bo/content/v3.java, line(s) 76,76 bo/content/x0.java, line(s) 72 bo/coroutines/a0.java, line(s) 407,407 bo/coroutines/a5.java, line(s) 33,33 bo/coroutines/c6.java, line(s) 537,537 bo/coroutines/e.java, line(s) 108,108 bo/coroutines/e1.java, line(s) 144,147 bo/coroutines/j1.java, line(s) 140,140 bo/coroutines/k0.java, line(s) 118,118 bo/coroutines/k6.java, line(s) 579 bo/coroutines/l.java, line(s) 457 bo/coroutines/l0.java, line(s) 173,173 bo/coroutines/l4.java, line(s) 63,63 bo/coroutines/m.java, line(s) 327,330 bo/coroutines/m0.java, line(s) 33,33 bo/coroutines/n6.java, line(s) 185 bo/coroutines/r1.java, line(s) 502,502 bo/coroutines/t6.java, line(s) 211,214 bo/coroutines/v3.java, line(s) 72,72 bo/coroutines/x0.java, line(s) 70 com/braze/configuration/RuntimeAppConfigurationProvider.java, line(s) 55,55 com/coroutines/configuration/RuntimeAppConfigurationProvider.java, line(s) 53,53 com/kontagent/AppConstants.java, line(s) 14
安全提示信息 此应用程序将数据复制到剪贴板。敏感数据不应复制到剪贴板，因为其他应用程序可以访问它
此应用程序将数据复制到剪贴板。敏感数据不应复制到剪贴板，因为其他应用程序可以访问它 https://github.com/OWASP/owasp-mstg/blob/master/Document/0x04b-Mobile-App-Security-Testing.md#clipboard Files: com/amplitude/eventexplorer/EventExplorerInfoActivity.java, line(s) 4,25
安全提示信息 应用与Firebase数据库通信
该应用与位于 https://api-project-843889502734.firebaseio.com 的 Firebase 数据库进行通信
已通过安全项 此应用程序可能具有Root检测功能
此应用程序可能具有Root检测功能 https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05j-Testing-Resiliency-Against-Reverse-Engineering.md#testing-root-detection-mstg-resilience-1 Files: com/comscore/applications/AppStartMeasurement.java, line(s) 20 com/comscore/utils/RootDetector.java, line(s) 9,14,20
已通过安全项 此应用程序使用SSL Pinning 来检测或防止安全通信通道中的MITM攻击
此应用程序使用SSL Pinning 来检测或防止安全通信通道中的MITM攻击 https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05g-Testing-Network-Communication.md#testing-custom-certificate-stores-and-certificate-pinning-mstg-network-4 Files: com/amplitude/api/PinnedAmplitudeClient.java, line(s) 67,133,66,131,133,63,128,55,55,122,122
已通过安全项 Firebase远程配置已禁用
Firebase远程配置URL （ https://firebaseremoteconfig.googleapis.com/v1/projects/843889502734/namespaces/firebase:fetch?key=AIzaSyDfGGbrSdvtwgNFTdi49WlHz3RHeBljtK4 ） 已禁用。响应内容如下所示：
{
"state": "NO_TEMPLATE"
}