Google Play警告：您的应用可能泄露了开发人员凭据 [英] Google Play warning: Your App may be leaking developer credentials

问题描述

请解释我，这是什么？

我收到GP发来的消息，内容如下：

Hello Google Play开发者

我们检测到您在本电子邮件末尾列出的应用是
可能会泄漏用于发出网络请求的凭证（HTTP
和FTP）。

请检查您使用网址编码基本访问权
身份验证，例如，诸如
的URL（ https：//用户名：[e-mail]。 COM / 。我们建议您
立即更改凭证并重新设计您的应用程序以避免
包括它们。

后续步骤

 登录您的开发者控制台并提交应用的更新版本。 
五小时后再回来查看 - 如果应用程序未正确更新，我们会显示一条警告消息。 
  

暴露的开发人员凭据可能允许攻击者危害您的
系统，从而使用户数据处于危险之中。有关此漏洞的其他技术问题
，您可以发布到Stack Overflow并使用
标签android-security。

如果您认为我们发送了此错误警告，您可以联系我们的
开发人员支持团队。

$ b b $ b

问候，

Google Play小组

我不明白我的应用有什么问题，请帮助我。我应该怎样改变我的应用程序？

安迪，巴勃罗和其他曾经访问过这个主题的精彩人物

>

最近问题解决了。

您只需将Appodeal SDK更新到最后一个（版本1.14.15）即可。

您可以在我们的文档中找到它。

还有

你可以在这里下载Android SDK （Native Android ）。

问候，
Andrew

Appodeal支持团队。

Please, explain me, what is it?

I have received a message from GP, with this text:

Hello Google Play Developer,

We detected that your app(s) listed at the end of this email are potentially leaking credentials used to make network requests (HTTP and FTP).

Please check for cases where you use url-encoded basic access authentication, for example a URL such as https://username:[e-mail]/. We recommend that you immediately change the credentials and redesign your app to avoid including them.

Next steps

Sign in to your Developer Console and submit the updated version of your app.
Check back after five hours - we’ll show a warning message if the app hasn’t been updated correctly.

Exposed developer credentials can allow an attacker to compromise your systems which puts user data at risk. For other technical questions about the vulnerability, you can post to Stack Overflow and use the tag "android-security."

We’re here to help

If you feel we have sent this warning in error, you can contact our developer support team.

Regards,

The Google Play Team

I don't understand what a problem with my app, please help me. What should I change in my app?

解决方案

Andy, Pablo and others wonderful people, who have visited this topic.

The problem was solved recently.

All you need to do - just update Appodeal SDK to the last one (ver. 1.14.15).

You can find it in our docs

Also you can download Android SDK here (Native Android).

Regards, Andrew

Appodeal Support Team.

这篇关于Google Play警告：您的应用可能泄露了开发人员凭据的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！