Titanium.App.Properties很安全 [英] Titanium.App.Properties is it safe
问题描述
我正在使用Titanium.App.Properties存储用户高度的机密数据.因此在这里存储值是否安全.越狱的iPhone是否有可能泄漏此值.此值是加密的还是以纯文本格式存储的?
I'm using Titanium.App.Properties to store user highly confidential data. So is it safe to store values here. Is it possible jailbreak iPhone's to leak this values. Is this values encrypted or stored as plain text?
预先感谢.
推荐答案
这是对这个老问题的更新:
Here is an update to this old question:
来自 钛3.X 文档:
从3.2.0版开始,tiapp.xml文件中定义的所有应用程序属性都存储在设备的安全存储中,使其成为只读.此外,现在限制了对这些属性的外部访问.其他iOS应用程序无法访问这些属性,本机Android模块必须使用Titanium模块API TiApplication.getAppProperties方法来访问这些属性.
As of Release 3.2.0, any application properties defined in the tiapp.xml file are stored in the device's secure storage, making them read-only. Additionally, external access to these properties is now restricted. Other iOS applications cannot access these properties and native Android modules must use the Titanium module API TiApplication.getAppProperties method to access these properties.
如果需要在运行时更改值,请首先使用这些API创建属性,而不是在tiapp.xml文件中定义它们.
If you need to change the values during runtime, initially create the property with these APIs rather than defining them in the tiapp.xml file.
在3.2.0版之前,tiapp.xml文件中定义的应用程序属性可能会被这些API覆盖,并由其他应用程序和模块从外部访问.
Prior to Release 3.2.0, application properties defined in the tiapp.xml file could be overwritten by these APIs and accessed externally by other applications and modules.
因此,问题的答案是:
- 如果使用SDK版本 3.2.0 及更高版本;
Titanium.App.Properties
具有足够的安全性来存储与应用程序相关的敏感数据:- 用于存储常量值(在运行时不能更改);使用
tiapp.xml
文件. 例如<property name="app.google.api.key" type="string">key_here</property>
- 要在运行时动态获取和设置值,请使用
Titanium.App.Properties
.
- If using SDK version 3.2.0 and above;
Titanium.App.Properties
is secure enough to store sensitive app-related data:- For storing constant values (cannot be changed at run-time); use
tiapp.xml
file. e.g.<property name="app.google.api.key" type="string">key_here</property>
- To get and set values dynamically at run-time, use
Titanium.App.Properties
.
这篇关于Titanium.App.Properties很安全的文章就介绍到这了,希望我们推荐的答案对大家有所帮助,也希望大家多多支持IT屋!
- For storing constant values (cannot be changed at run-time); use
- 用于存储常量值(在运行时不能更改);使用