dcloudio / dcloudio/mui

本地打包APP google play不能通过审核

Open
#350 1 comment 0 reactions 0 assignees View on GitHub
Dominant language
JavaScript
Stars
13.5k
Forks
6.5k
PR merge metrics
No merged PRs in 30d

Description

Vulnerability | APK Version(s) | Deadline to fix
-- | -- | --
SSL Error HandlerFor more information on how to address WebView SSL Error Handler alerts, please see this Google Help Center article. | 2 | 11/30/2016

本文面向的是在应用中采用的 WebViewClient.onReceivedSslError 处理程序实施方式不安全的开发者。具体来说,这种实施方式会忽略所有 SSL 证书验证错误,使应用容易受到中间人攻击。攻击者可能会更改受影响的 WebView 内容、读取传输的数据(例如登录凭据),以及执行应用中使用 JavaScript 的代码。
https://support.google.com/faqs/answer/7071387

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.