安全分析报告： 淡蓝视频 v1.1.92

应用程序记录日志信息,不得记录敏感信息
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#logs

Files:
com/jhomlala/better_player/CacheWorker.java, line(s) 42,55,114,119
com/jhomlala/better_player/ImageWorker.java, line(s) 106,118,142
com/pichillilorenzo/flutter_inappwebview/JavaScriptBridgeInterface.java, line(s) 79
com/pichillilorenzo/flutter_inappwebview/ServiceWorkerManager.java, line(s) 61
com/pichillilorenzo/flutter_inappwebview/Util.java, line(s) 243,227
com/pichillilorenzo/flutter_inappwebview/chrome_custom_tabs/CustomTabsHelper.java, line(s) 76
com/pichillilorenzo/flutter_inappwebview/content_blocker/ContentBlockerHandler.java, line(s) 198,279
com/pichillilorenzo/flutter_inappwebview/in_app_browser/InAppBrowserActivity.java, line(s) 273,362
com/pichillilorenzo/flutter_inappwebview/in_app_browser/InAppBrowserManager.java, line(s) 156
com/pichillilorenzo/flutter_inappwebview/in_app_webview/DisplayListenerProxy.java, line(s) 40
com/pichillilorenzo/flutter_inappwebview/in_app_webview/FlutterWebView.java, line(s) 76,147
com/pichillilorenzo/flutter_inappwebview/in_app_webview/InAppWebView.java, line(s) 1075
com/pichillilorenzo/flutter_inappwebview/in_app_webview/InAppWebViewChromeClient.java, line(s) 1077,1128,218,589,632,686,741,801,862,930,993
com/pichillilorenzo/flutter_inappwebview/in_app_webview/InAppWebViewClient.java, line(s) 132,220,295,381,436,517,553,611
com/pichillilorenzo/flutter_inappwebview/in_app_webview/InAppWebViewRenderProcessClient.java, line(s) 36,68
com/pichillilorenzo/flutter_inappwebview/in_app_webview/InputAwareWebView.java, line(s) 42,50,58,83,130
com/yalantis/ucrop/UCropActivity.java, line(s) 498
e/b/k/g.java, line(s) 2190,1135,1141,1767,2153,2437
e/b/k/i.java, line(s) 95
e/b/k/k.java, line(s) 46,56,71,81,98,110,122,131,144,158,170
e/b/k/n.java, line(s) 56,71
e/b/o/g.java, line(s) 152,199,261
e/b/o/j/i.java, line(s) 401
e/b/o/j/j.java, line(s) 274
e/b/p/b0.java, line(s) 114,143,148,153,871
e/b/p/c1.java, line(s) 392,397
e/b/p/e1.java, line(s) 108
e/b/p/f0.java, line(s) 102,116,130,139,282,466
e/b/p/f1.java, line(s) 83
e/b/p/h1.java, line(s) 23,34,52,54,56
e/b/p/o0.java, line(s) 346,464,183,188,195,257,552
e/b/p/q0.java, line(s) 116,148
e/b/p/r0.java, line(s) 182,45,57,95,124,382
e/b/p/v0.java, line(s) 94,132,358,114,167,227,241,294,297,364,367,419
e/b/p/w0.java, line(s) 29
e/b/p/y.java, line(s) 47
e/c0/e.java, line(s) 141,153,158,163,170,182,189,198,208,247,252,261,267,273,283,290
e/c0/l.java, line(s) 21,23,32,34,43,45,54,56,65,67
e/f/j/c.java, line(s) 83,236
e/f/j/f.java, line(s) 26,35,49,58
e/f/j/h.java, line(s) 30
e/f/j/l.java, line(s) 64,78,82
e/f/j/m.java, line(s) 169,182,188,243,270,280,291,299,168,181,187,242,269,279,290,298,122,191,237,261
e/f/j/q.java, line(s) 60
e/f/k/e/c.java, line(s) 57
e/f/k/e/d.java, line(s) 64
e/f/k/e/h.java, line(s) 293,311,317,128,137,247
e/f/l/d.java, line(s) 566,571
e/f/l/f.java, line(s) 68
e/f/l/g.java, line(s) 39,71
e/f/l/h.java, line(s) 56,222
e/f/l/k.java, line(s) 82,85
e/f/l/l.java, line(s) 97
e/f/l/m/a.java, line(s) 62,71,129,139
e/f/l/m/e.java, line(s) 40,63
e/f/p/d.java, line(s) 27,31,35
e/f/p/e.java, line(s) 23
e/f/r/b.java, line(s) 36,48,50,62,64,78,81
e/f/t/a0.java, line(s) 20,31
e/f/t/c0.java, line(s) 14,29,50,77,98,119,140
e/f/t/d.java, line(s) 56
e/f/t/h0.java, line(s) 735,909,538,550,557,566,40,62,900
e/f/t/i.java, line(s) 19,28
e/f/t/j0/c.java, line(s) 122
e/f/t/k0/b.java, line(s) 74
e/f/t/l.java, line(s) 14
e/f/t/z.java, line(s) 1157,1084,1156
e/f/u/c.java, line(s) 24,33
e/f/u/d.java, line(s) 25,34
e/f/u/i.java, line(s) 55,64
e/f/u/k.java, line(s) 52,51
e/i/a/f.java, line(s) 89
e/j/a/a.java, line(s) 283,1069,1205,1369,1489,1492,1501,1507,1535,1556,1570,1586,1619,1636,1643,1646,1688,1695,1706,1723,1728,1735,1979,2064,2111,2290,2342,2389,2485,2505,2511,2617,2732,2824,2908,2925,2943,2950,3140,3192,3212,3225,3273,3330,3338,3366,3405,3429,3498,3537,3542,3548,715,723,757,769,781,793,805,817,829,841,853,860,871,883,90,866,1422,2281,2300,2308,2574,2583,2640,2647,3057,3133,3513,3565,3568,3675
e/j/a/b.java, line(s) 51,55
e/k/d/a.java, line(s) 30,61,70,80
e/k/d/a0.java, line(s) 16
e/k/d/b.java, line(s) 107
e/k/d/b0.java, line(s) 114,191,200,207,216,253,298,309,317,367,374,381,388,412,479,497
e/k/d/c.java, line(s) 495,522,527,894
e/k/d/k.java, line(s) 87,97
e/k/d/m.java, line(s) 683,860,914,389,291,455,636,648,885,1273,1383,1392,1402,1424,1650,1661,1706,1850,1859,1885,2170,2178,112,119,141,148,259,266
e/k/d/p.java, line(s) 47,81,66,74,134,140
e/k/d/t.java, line(s) 78,95,193,215,300,344,363,378,388,513,544,583,686,694,186,281,432,598,728
e/k/d/u.java, line(s) 219,229,270,288,306
e/n/a/b.java, line(s) 37,46,71
e/o/j/a.java, line(s) 24
e/p/a.java, line(s) 321,361,414,416,193,200,202,211,343,345,353,357,403,106,137,196,204,208,224,233,243,306,324
e/p/b.java, line(s) 55,66,68,133,147,171,181,185,187,192,199,241,263,297,299,126,177,251,267,283,293,301
e/r/f.java, line(s) 79,405,412,550
e/r/g.java, line(s) 99,137
e/r/i.java, line(s) 226
e/r/n.java, line(s) 114,117,122
e/t/a/c.java, line(s) 36,39,51,29,43
e/v/b/c.java, line(s) 503,663,677,697
e/w/a.java, line(s) 34
e/x/i0.java, line(s) 35,84
e/x/y.java, line(s) 33,42,44,81,94
e/y/a/a/i.java, line(s) 255,258
f/a/a/j.java, line(s) 17
f/a/a/n.java, line(s) 45,70,74,136,193,199,204
f/a/a/o.java, line(s) 235,239,244
f/a/a/p.java, line(s) 44
f/b/a/b.java, line(s) 275,284,233,274,281,236
f/b/a/k/a.java, line(s) 294
f/b/a/l/d.java, line(s) 96,123,95,122
f/b/a/l/e.java, line(s) 63,84,102,62,83,101
f/b/a/m/n/b.java, line(s) 51,50
f/b/a/m/n/j.java, line(s) 75,101,74,100,104,110,117,114,118
f/b/a/m/n/l.java, line(s) 52,51
f/b/a/m/n/p/c.java, line(s) 99,98
f/b/a/m/n/p/e.java, line(s) 55,88,54,87
f/b/a/m/o/a0/j.java, line(s) 158,197,159,198
f/b/a/m/o/a0/k.java, line(s) 105,117,190,225,104,116,143,150,171,189,199,214,224,144,151,177,200,215
f/b/a/m/o/b0/e.java, line(s) 34,40,69,79,93,35,70,41,82,94
f/b/a/m/o/b0/i.java, line(s) 121,105
f/b/a/m/o/c0/a.java, line(s) 114,111
f/b/a/m/o/c0/b.java, line(s) 38,37
f/b/a/m/o/h.java, line(s) 507,321,335,506,451
f/b/a/m/o/i.java, line(s) 54,55
f/b/a/m/o/k.java, line(s) 14,147
f/b/a/m/o/q.java, line(s) 97
f/b/a/m/o/z.java, line(s) 80,81
f/b/a/m/p/c.java, line(s) 16,15
f/b/a/m/p/d.java, line(s) 43,42
f/b/a/m/p/f.java, line(s) 96,95
f/b/a/m/p/s.java, line(s) 85,88
f/b/a/m/p/t.java, line(s) 36,35
f/b/a/m/q/a.java, line(s) 75,76
f/b/a/m/q/d/c.java, line(s) 53,52,69,70
f/b/a/m/q/d/d.java, line(s) 14,15
f/b/a/m/q/d/h.java, line(s) 175,193,197,202,211,214,219,251,258,345,355,367,376,384,174,192,196,201,210,213,218,250,257,344,354,366,375,383
f/b/a/m/q/d/j.java, line(s) 198,219,365,187,197,218,364,456,480,188,299,457
f/b/a/m/q/d/k.java, line(s) 40,46,41,47
f/b/a/m/q/d/n.java, line(s) 121,122
f/b/a/m/q/d/x.java, line(s) 160,157
f/b/a/m/q/h/a.java, line(s) 59,84,89,94,60,85,90,95
f/b/a/m/q/h/d.java, line(s) 21,22
f/b/a/m/q/h/j.java, line(s) 38,41
f/b/a/n/e.java, line(s) 33,32,54,70,55,71
f/b/a/n/f.java, line(s) 12,11
f/b/a/n/k.java, line(s) 144,145
f/b/a/n/l.java, line(s) 154,155,163
f/b/a/n/n.java, line(s) 89,90
f/b/a/n/o.java, line(s) 130,137,131,138
f/b/a/o/e.java, line(s) 52,59,70,75,51,58,63,69,74,64
f/b/a/q/j.java, line(s) 107,14,491,515
f/b/a/s/l/a.java, line(s) 59,60
f/c/a/b.java, line(s) 98
f/c/a/g.java, line(s) 133,136
f/e/a/b.java, line(s) 42
f/e/b/a.java, line(s) 154,171
f/f/a/d/c.java, line(s) 210
f/f/a/d/h/b.java, line(s) 782,787,821,825,830,837
f/f/a/d/h/e.java, line(s) 736,741,748
f/f/a/g/d.java, line(s) 19,30,41,52
f/g/a/a/m4/v.java, line(s) 28,34,57,77
f/g/d/s/a/f.java, line(s) 33,73
f/g/d/s/a/h.java, line(s) 40,34
f/g/d/s/a/p/a/a.java, line(s) 12
f/h/a/a.java, line(s) 18
f/h/a/b/c/d.java, line(s) 44,48,32
f/h/a/b/c/g.java, line(s) 37,59,76
f/h/a/c/c/b.java, line(s) 45,49,57,65,114,136,141,71,85
f/h/c/a/a/a/e/c.java, line(s) 7,18,14
f/j/a/g.java, line(s) 131,154,422,984,1008,1057
f/j/a/h.java, line(s) 22
f/j/a/i.java, line(s) 479,534
f/l/a/j.java, line(s) 571,621,96,259,361,436
f/l/a/k.java, line(s) 105,176,259
f/l/a/o.java, line(s) 94
f/l/a/y/e.java, line(s) 80,103,121
f/l/a/y/f.java, line(s) 27,28,32,37,43,62,65,70,79,98,104,107,130,140,142,146,151,163,165,169,182,185,194,197,202
f/l/a/y/g.java, line(s) 43,59,78,95,122,47,66,83,99
f/l/a/y/h.java, line(s) 60,78,310,123,222,252,218,224,266,274
f/l/a/y/l.java, line(s) 27
f/l/a/y/n.java, line(s) 27
f/l/a/y/q.java, line(s) 37,38
f/o/a/c.java, line(s) 284,332,446,459,541,603,619,667,673,684,706,710,752,769,838,880,889,1060,1137,1147,336,863,884,1164
f/o/a/d.java, line(s) 57,68
f/p/a/l/a.java, line(s) 169,103
f/p/a/l/b.java, line(s) 55,159,227,118,121,234,241,247
f/p/a/m/a.java, line(s) 49,98,108
f/p/a/m/c.java, line(s) 73
f/p/a/m/f.java, line(s) 124,141,157,161,166,175,178,183,194,201,235,245,257,266,274,140,156,160,165,174,177,182,193,200,234,244,256,265,273
f/p/a/n/b.java, line(s) 139,59,225
f/q/a/b.java, line(s) 37,118,139
i/a/a/a/a.java, line(s) 67,70
j/a/b.java, line(s) 10,14,24,28,32
j/a/f/a/a.java, line(s) 17,20
j/a/f/c/b.java, line(s) 24
j/a/f/c/g.java, line(s) 36
j/a/f/e/a.java, line(s) 127
j/a/f/h/a.java, line(s) 59,48
j/a/f/h/b.java, line(s) 33,36
j/a/f/h/c.java, line(s) 13,31,46
j/a/f/j/b3.java, line(s) 27,59,80,110,102
j/a/f/j/j2.java, line(s) 76

此应用程序将数据复制到剪贴板。敏感数据不应复制到剪贴板，因为其他应用程序可以访问它
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04b-Mobile-App-Security-Testing.md#clipboard

Files:
j/a/e/b/b.java, line(s) 4,95,105
j/a/e/e/e.java, line(s) 7,273