DocxReader v1.2.29版本 - 安全评分 _南明离火移动安全分析平台

安全分数

安全分数 44/100

风险评级

等级

严重性分布 (%)

隐私风险

用户/设备跟踪器

调研结果

高危 6

中危 19

信息 2

安全 2

关注 0

高危域配置不安全地配置为允许明文流量到达范围内的这些域。

NETWORK

Scope:
139.180.154.184

高危如果一个应用程序使用WebView.loadDataWithBaseURL方法来加载一个网页到WebView，那么这个应用程序可能会遭受跨站脚本攻击

CODE

如果一个应用程序使用WebView.loadDataWithBaseURL方法来加载一个网页到WebView，那么这个应用程序可能会遭受跨站脚本攻击
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05h-Testing-Platform-Interaction.md#static-analysis-7

Files:
com/applovin/impl/adview/b.java, line(s) 529,14
com/applovin/impl/sdk/f/q.java, line(s) 104,4
com/mbridge/msdk/click/h.java, line(s) 240,13,14
com/mbridge/msdk/mbbanner/common/bridge/BannerExpandDialog.java, line(s) 199,14
com/mbridge/msdk/mbbanner/common/c/c.java, line(s) 385,13
com/mbridge/msdk/nativex/view/MBMediaView.java, line(s) 1110,1605,24,25
com/mbridge/msdk/splash/signal/SplashExpandDialog.java, line(s) 197,14
com/mbridge/msdk/video/bt/module/MBridgeBTWebView.java, line(s) 364,13
com/mbridge/msdk/video/module/MBridgeAlertWebview.java, line(s) 103,6
com/mbridge/msdk/video/module/MBridgeH5EndCardView.java, line(s) 910,17
com/unity3d/services/core/webview/WebViewApp.java, line(s) 145,9,52,58,72,98
com/wxiwei/office/wp/dialog/TXTEncodingDialog.java, line(s) 45,7

高危应用程序在加密算法中使用ECB模式。ECB模式是已知的弱模式，因为它对相同的明文块[UNK]产生相同的密文

CODE

应用程序在加密算法中使用ECB模式。ECB模式是已知的弱模式，因为它对相同的明文块[UNK]产生相同的密文
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#weak-block-cipher-mode

Files:
com/tom_roush/pdfbox/pdmodel/encryption/StandardSecurityHandler.java, line(s) 308
com/wxiwei/office/fc/poifs/crypt/EcmaDecryptor.java, line(s) 53

高危应用程序使用带PKCS5/PKCS7填充的加密模式CBC。此配置容易受到填充oracle攻击。

CODE

应用程序使用带PKCS5/PKCS7填充的加密模式CBC。此配置容易受到填充oracle攻击。
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#identifying-insecure-andor-deprecated-cryptographic-algorithms-mstg-crypto-4

Files:
com/ironsource/mediationsdk/utils/IronSourceAES.java, line(s) 70,136
com/tom_roush/pdfbox/pdmodel/encryption/SecurityHandler.java, line(s) 120,148

高危该文件是World Writable。任何应用程序都可以写入文件

CODE

该文件是World Writable。任何应用程序都可以写入文件
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#testing-local-storage-for-sensitive-data-mstg-storage-1-and-mstg-storage-2

Files:
com/ads/control/util/SharePreferenceUtils.java, line(s) 56
com/ironsource/mediationsdk/utils/IronSourceUtils.java, line(s) 479
com/trustedapp/pdfreader/utils/CommonUtils.java, line(s) 266,175,270

高危应用程序包含隐私跟踪程序

TRACKERS

此应用程序有多个17隐私跟踪程序。跟踪器可以跟踪设备或用户，是终端用户的隐私问题。

中危应用程序已启用明文网络流量

MANIFEST

[android:usesCleartextTraffic=true]
应用程序打算使用明文网络流量，例如明文HTTP，FTP协议，DownloadManager和MediaPlayer。针对API级别27或更低的应用程序，默认值为“true”。针对API级别28或更高的应用程序，默认值为“false”。避免使用明文流量的主要原因是缺乏机密性，真实性和防篡改保护；网络攻击者可以窃听传输的数据，并且可以在不被检测到的情况下修改它。

中危 Service (com.trustedapp.pdfreader.service.MyFirebaseMessagingService) 未被保护。

MANIFEST

[android:exported=true]
发现 Service与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。

中危 Broadcast Receiver (com.adjust.sdk.AdjustReferrerReceiver) 受权限保护, 但是应该检查权限的保护级别。

MANIFEST

Permission: android.permission.INSTALL_PACKAGES [android:exported=true]
发现一个 Broadcast Receiver被共享给了设备上的其他应用程序，因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此，应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险，一个恶意应用程序可以请求并获得这个权限，并与该组件交互。如果它被设置为签名，只有使用相同证书签名的应用程序才能获得这个权限。

中危 Activity (com.facebook.CustomTabActivity) 未被保护。

MANIFEST

[android:exported=true]
发现 Activity与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。

中危 Broadcast Receiver (com.google.firebase.iid.FirebaseInstanceIdReceiver) 受权限保护, 但是应该检查权限的保护级别。

MANIFEST

Permission: com.google.android.c2dm.permission.SEND [android:exported=true]
发现一个 Broadcast Receiver被共享给了设备上的其他应用程序，因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此，应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险，一个恶意应用程序可以请求并获得这个权限，并与该组件交互。如果它被设置为签名，只有使用相同证书签名的应用程序才能获得这个权限。

中危 Service (androidx.work.impl.background.systemjob.SystemJobService) 受权限保护, 但是应该检查权限的保护级别。

MANIFEST

Permission: android.permission.BIND_JOB_SERVICE [android:exported=true]
发现一个 Service被共享给了设备上的其他应用程序，因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此，应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险，一个恶意应用程序可以请求并获得这个权限，并与该组件交互。如果它被设置为签名，只有使用相同证书签名的应用程序才能获得这个权限。

中危 Broadcast Receiver (androidx.work.impl.diagnostics.DiagnosticsReceiver) 受权限保护, 但是应该检查权限的保护级别。

MANIFEST

Permission: android.permission.DUMP [android:exported=true]
发现一个 Broadcast Receiver被共享给了设备上的其他应用程序，因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此，应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险，一个恶意应用程序可以请求并获得这个权限，并与该组件交互。如果它被设置为签名，只有使用相同证书签名的应用程序才能获得这个权限。

中危文件可能包含硬编码的敏感信息，如用户名、密码、密钥等

CODE

文件可能包含硬编码的敏感信息，如用户名、密码、密钥等
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#checking-memory-for-sensitive-data-mstg-storage-10

Files:
com/applovin/impl/sdk/n.java, line(s) 651
com/applovin/mediation/AppLovinUtils.java, line(s) 20
com/applovin/mediation/ads/MaxAdView.java, line(s) 173,163
com/applovin/mediation/ads/MaxAppOpenAd.java, line(s) 57,47
com/applovin/mediation/ads/MaxInterstitialAd.java, line(s) 85,75
com/applovin/mediation/ads/MaxRewardedAd.java, line(s) 111,101
com/applovin/mediation/ads/MaxRewardedInterstitialAd.java, line(s) 80,70
com/applovin/mediation/nativeAds/MaxNativeAdLoader.java, line(s) 79,74
com/applovin/sdk/AppLovinSdk.java, line(s) 237
com/applovin/sdk/AppLovinWebViewActivity.java, line(s) 20
com/bykv/vk/openvk/component/video/a/b/i.java, line(s) 117
com/ironsource/adapters/ironsource/IronSourceAdapter.java, line(s) 77,42,41,613,198
com/ironsource/adapters/supersonicads/SupersonicAdsAdapter.java, line(s) 84,265,701
com/ironsource/adapters/supersonicads/SupersonicConfig.java, line(s) 23
com/ironsource/mediationsdk/C0076d.java, line(s) 217,332
com/ironsource/mediationsdk/C1215d.java, line(s) 220,335
com/ironsource/mediationsdk/CachedResponse.java, line(s) 38
com/ironsource/mediationsdk/InitConfig.java, line(s) 43
com/ironsource/mediationsdk/L.java, line(s) 1433,1416
com/ironsource/mediationsdk/server/ServerURL.java, line(s) 23,48
com/ironsource/mediationsdk/utils/IronSourceConstants.java, line(s) 91,102
com/mbridge/msdk/MBridgeConstans.java, line(s) 14,51
com/mbridge/msdk/click/b/a.java, line(s) 35
com/mbridge/msdk/foundation/db/l.java, line(s) 58,44
com/mbridge/msdk/foundation/download/core/DownloadCommon.java, line(s) 21
com/mbridge/msdk/foundation/download/core/DownloaderReporter.java, line(s) 14
com/mbridge/msdk/foundation/entity/CampaignEx.java, line(s) 38
com/mbridge/msdk/foundation/entity/m.java, line(s) 187,208,223,245,314,348,373,402,413,434,445,465,475,495,507,547,563,269,284,774
com/mbridge/msdk/foundation/same/report/d.java, line(s) 280
com/mbridge/msdk/playercommon/exoplayer2/drm/DefaultDrmSessionManager.java, line(s) 30
com/mbridge/msdk/video/dynview/moffer/MOfferModel.java, line(s) 112
com/tom_roush/pdfbox/pdmodel/interactive/annotation/PDAnnotationRubberStamp.java, line(s) 21
com/tom_roush/pdfbox/pdmodel/interactive/annotation/PDAnnotationText.java, line(s) 11
com/trustedapp/pdfreader/view/fragment/ListFileBookmarkFragment.java, line(s) 54
com/trustedapp/pdfreader/view/fragment/ListFileFragment.java, line(s) 58
com/unity3d/ads/metadata/InAppPurchaseMetaData.java, line(s) 14
com/unity3d/services/ads/gmascar/utils/ScarConstants.java, line(s) 4,5,6,8,9
com/unity3d/services/core/configuration/ExperimentObject.java, line(s) 7,8
com/unity3d/services/core/device/reader/DeviceInfoReaderFilterProvider.java, line(s) 11,12
com/unity3d/services/core/device/reader/JsonStorageKeyNames.java, line(s) 4,6,7,9,10,11,8,12,5,13,14,15
com/unity3d/services/core/properties/SdkProperties.java, line(s) 26
com/vungle/mediation/VungleExtrasBuilder.java, line(s) 16
com/vungle/warren/log/LogManager.java, line(s) 24,25,26,27
com/vungle/warren/log/LogSender.java, line(s) 22,23
com/vungle/warren/model/Cookie.java, line(s) 21,22
com/wxiwei/office/fc/hwpf/model/SavedByEntry.java, line(s) 39
com/wxiwei/office/fc/poifs/crypt/Decryptor.java, line(s) 16
com/wxiwei/office/res/ResConstant.java, line(s) 8

中危应用程序可以读取/写入外部存储器，任何应用程序都可以读取写入外部存储器的数据

CODE

应用程序可以读取/写入外部存储器，任何应用程序都可以读取写入外部存储器的数据
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#external-storage

Files:
com/apm/insight/entity/d.java, line(s) 19
com/apm/insight/l/w.java, line(s) 38,88,99
com/apm/insight/nativecrash/c.java, line(s) 656
com/ironsource/environment/h.java, line(s) 512,322
com/ironsource/mediationsdk/utils/h.java, line(s) 154,276
com/ironsource/sdk/utils/SDKUtils.java, line(s) 253
com/mbridge/msdk/foundation/same/report/b/a.java, line(s) 83
com/mbridge/msdk/foundation/tools/aa.java, line(s) 87,97,109
com/trustedapp/pdfreader/service/FileDownloadReceiverService.java, line(s) 60,61
com/trustedapp/pdfreader/utils/CommonUtils.java, line(s) 245
com/trustedapp/pdfreader/utils/RealPathUtil.java, line(s) 102,117,128
com/trustedapp/pdfreader/utils/Tools.java, line(s) 42,43,108
com/trustedapp/pdfreader/utils/Utils.java, line(s) 198
com/trustedapp/pdfreader/view/activity/ReadAllDocActivity.java, line(s) 464,465
com/trustedapp/pdfreader/view/activity/SplashActivity.java, line(s) 327
com/trustedapp/pdfreader/view/fragment/BrowseFragment.java, line(s) 90
com/unity3d/services/core/cache/CacheDirectory.java, line(s) 56
com/vungle/warren/VungleApiClient.java, line(s) 419
com/vungle/warren/persistence/CacheManager.java, line(s) 118,120
com/vungle/warren/persistence/Repository.java, line(s) 84,85
com/vungle/warren/utility/platform/AndroidPlatform.java, line(s) 133
com/wxiwei/office/macro/MacroFrame.java, line(s) 184
com/wxiwei/office/model/Constants.java, line(s) 35,36
com/wxiwei/office/officereader/AppActivity.java, line(s) 198,199
com/wxiwei/office/system/SysKit.java, line(s) 213,214

中危应用程序使用SQLite数据库并执行原始SQL查询。原始SQL查询中不受信任的用户输入可能会导致SQL注入。敏感信息也应加密并写入数据库

CODE

应用程序使用SQLite数据库并执行原始SQL查询。原始SQL查询中不受信任的用户输入可能会导致SQL注入。敏感信息也应加密并写入数据库
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x04h-Testing-Code-Quality.md#injection-flaws-mstg-arch-2-and-mstg-platform-2

Files:
com/adcolony/sdk/n.java, line(s) 5,259,276
com/adcolony/sdk/o.java, line(s) 6,272
com/adcolony/sdk/p.java, line(s) 6,20
com/apm/insight/e/b/a.java, line(s) 4,38
com/apm/insight/e/b/b.java, line(s) 4,44,45,38
com/bykv/vk/openvk/component/video/a/b/b/d.java, line(s) 4,5,14,20,21,23,25
com/ironsource/b/a.java, line(s) 5,6,118,123
com/ironsource/environment/f.java, line(s) 6,7,25,47,111
com/mbridge/msdk/foundation/db/BatchReportDao.java, line(s) 6,66,81
com/mbridge/msdk/foundation/db/e.java, line(s) 6,925,938,985
com/mbridge/msdk/foundation/db/g.java, line(s) 4,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70
com/mbridge/msdk/foundation/download/database/DatabaseHelper.java, line(s) 6,86,154,196,302,310
com/trustedapp/pdfreader/data/DatabaseHandler.java, line(s) 6,7,46,120,142,161,179,186,193
com/trustedapp/pdfreader/data/DbHelper.java, line(s) 8,9,306
com/vungle/warren/persistence/DatabaseHelper.java, line(s) 9,10,136
com/vungle/warren/persistence/Repository.java, line(s) 7,137
com/wxiwei/office/officereader/database/DBHelper.java, line(s) 4,5,21,22,23,30,31,32
com/wxiwei/office/officereader/database/DBService.java, line(s) 5,19,67,96,114,128,145,167

中危应用程序使用不安全的随机数生成器

CODE

应用程序使用不安全的随机数生成器
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#weak-random-number-generators

Files:
com/apm/insight/i.java, line(s) 8
com/applovin/exoplayer2/h/z.java, line(s) 4
com/applovin/impl/a/m.java, line(s) 18
com/ironsource/mediationsdk/utils/e.java, line(s) 14
com/ironsource/mediationsdk/utils/g.java, line(s) 6
com/mbridge/msdk/dycreator/baseview/rewardpopview/MBAcquireRewardPopView.java, line(s) 25
com/mbridge/msdk/playercommon/exoplayer2/source/ShuffleOrder.java, line(s) 4
com/mbridge/msdk/playercommon/exoplayer2/trackselection/RandomTrackSelection.java, line(s) 6
com/mbridge/msdk/playercommon/exoplayer2/upstream/cache/CachedContentIndex.java, line(s) 21
com/mbridge/msdk/thrid/okhttp/OkHttpClient.java, line(s) 30
com/mbridge/msdk/thrid/okhttp/internal/ws/RealWebSocket.java, line(s) 28
com/mbridge/msdk/thrid/okhttp/internal/ws/WebSocketWriter.java, line(s) 10
com/tom_roush/pdfbox/pdmodel/graphics/predictor/PredictorAlgorithm.java, line(s) 3
com/unity3d/services/core/request/metrics/SDKMetrics.java, line(s) 9
com/wxiwei/office/fc/util/TempFile.java, line(s) 4

中危 MD5是已知存在哈希冲突的弱哈希

CODE

MD5是已知存在哈希冲突的弱哈希
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#identifying-insecure-andor-deprecated-cryptographic-algorithms-mstg-crypto-4

Files:
com/ads/control/admob/Admob.java, line(s) 1097
com/apm/insight/l/v.java, line(s) 68
com/appsflyer/internal/AFb1sSDK.java, line(s) 192,198
com/bykv/vk/openvk/component/video/api/f/b.java, line(s) 47
com/ironsource/mediationsdk/utils/IronSourceUtils.java, line(s) 380
com/ironsource/sdk/controller/t.java, line(s) 24
com/ironsource/sdk/utils/SDKUtils.java, line(s) 174
com/itextpdf/text/ImgJBIG2.java, line(s) 31
com/itextpdf/text/pdf/PdfEncryption.java, line(s) 59,125
com/itextpdf/text/pdf/PdfSmartCopy.java, line(s) 24
com/mbridge/msdk/foundation/download/resource/MBResourceManager.java, line(s) 101
com/mbridge/msdk/foundation/tools/u.java, line(s) 20
com/tom_roush/pdfbox/pdfwriter/COSWriter.java, line(s) 772
com/tom_roush/pdfbox/pdmodel/encryption/MessageDigests.java, line(s) 13
com/wxiwei/office/fc/hslf/usermodel/PictureData.java, line(s) 44
com/wxiwei/office/fc/hssf/record/crypto/Biff8EncryptionKey.java, line(s) 51,86,106
com/wxiwei/office/fc/hssf/usermodel/HSSFWorkbook.java, line(s) 257

中危 SHA-1是已知存在哈希冲突的弱哈希

CODE

SHA-1是已知存在哈希冲突的弱哈希
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#identifying-insecure-andor-deprecated-cryptographic-algorithms-mstg-crypto-4

Files:
com/adcolony/sdk/d1.java, line(s) 10
com/adcolony/sdk/z0.java, line(s) 318
com/applovin/impl/sdk/utils/StringUtils.java, line(s) 32
com/applovin/impl/sdk/utils/n.java, line(s) 148
com/appsflyer/internal/AFb1sSDK.java, line(s) 137
com/itextpdf/text/pdf/PdfEncryption.java, line(s) 352
com/itextpdf/text/pdf/PdfPKCS7.java, line(s) 1006,1168,511,513
com/itextpdf/text/pdf/PdfReader.java, line(s) 1576
com/tom_roush/pdfbox/pdmodel/encryption/MessageDigests.java, line(s) 21
com/unity3d/services/core/device/Device.java, line(s) 161
com/wxiwei/office/fc/poifs/crypt/AgileDecryptor.java, line(s) 127,157,175
com/wxiwei/office/fc/poifs/crypt/Decryptor.java, line(s) 54
com/wxiwei/office/fc/poifs/crypt/EcmaDecryptor.java, line(s) 26,80

中危 IP地址泄露

CODE

IP地址泄露


Files:
com/applovin/mediation/BuildConfig.java, line(s) 4
com/applovin/mediation/adapters/AdColonyMediationAdapter.java, line(s) 319
com/applovin/mediation/adapters/ByteDanceMediationAdapter.java, line(s) 549
com/applovin/mediation/adapters/FacebookMediationAdapter.java, line(s) 640
com/applovin/mediation/adapters/GoogleMediationAdapter.java, line(s) 660
com/applovin/mediation/adapters/IronSourceMediationAdapter.java, line(s) 260
com/applovin/mediation/adapters/MintegralMediationAdapter.java, line(s) 613
com/applovin/mediation/adapters/UnityAdsMediationAdapter.java, line(s) 236
com/applovin/mediation/adapters/VungleMediationAdapter.java, line(s) 722
com/itextpdf/text/pdf/OcspClientBouncyCastle.java, line(s) 44
com/itextpdf/text/pdf/PdfPKCS7.java, line(s) 274,316,323,1088,120,121,122,123,127,128,129,130,131,124,119,125,126,297,312,296,311,298,313,276,318,325,277,319,326,278,320,327,275,317,324,292,309,293,310,294,295,138,137,280,330,331,279,328,329,281,332,333,673,79,286,305,287,306,288,307,285,304,283,301,282,302,284,303,77,78,134,74,76,80,73,528
com/jirbo/adcolony/BuildConfig.java, line(s) 4
com/tom_roush/pdfbox/BuildConfig.java, line(s) 9
com/vungle/mediation/BuildConfig.java, line(s) 4
com/wxiwei/office/system/ErrorUtil.java, line(s) 30
com/wxiwei/office/system/SocketClient.java, line(s) 10

中危应用程序创建临时文件。敏感信息永远不应该被写进临时文件

CODE

应用程序创建临时文件。敏感信息永远不应该被写进临时文件


Files:
com/itextpdf/text/pdf/PdfStamper.java, line(s) 59
com/mbridge/msdk/playercommon/exoplayer2/util/Util.java, line(s) 235
com/tom_roush/pdfbox/io/RandomAccessBufferedFileInputStream.java, line(s) 91
com/tom_roush/pdfbox/io/ScratchFile.java, line(s) 65
com/wxiwei/office/fc/openxml4j/opc/ZipPackage.java, line(s) 251
ms/bd/o/Pgl/pblg.java, line(s) 30
org/junit/rules/TemporaryFolder.java, line(s) 19,75

中危不安全的Web视图实现。可能存在WebView任意代码执行漏洞

CODE

不安全的Web视图实现。可能存在WebView任意代码执行漏洞
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05h-Testing-Platform-Interaction.md#testing-javascript-execution-in-webviews-mstg-platform-5

Files:
com/unity3d/services/ads/webplayer/WebPlayerView.java, line(s) 533,517
com/unity3d/services/core/webview/WebView.java, line(s) 103,76

中危可能存在跨域漏洞。在 WebView 中启用从 URL 访问文件可能会泄漏文件系统中的敏感信息

CODE

可能存在跨域漏洞。在 WebView 中启用从 URL 访问文件可能会泄漏文件系统中的敏感信息
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05h-Testing-Platform-Interaction.md#static-analysis-6

Files:
com/adcolony/sdk/b1.java, line(s) 677,668
com/ironsource/sdk/utils/d.java, line(s) 33,35
com/mbridge/msdk/foundation/webview/BrowserView.java, line(s) 89,86
com/mbridge/msdk/mbsignalcommon/base/BaseWebView.java, line(s) 91,88
com/unity3d/services/core/webview/WebView.java, line(s) 50,76
com/vungle/warren/ui/view/WebSettingsUtils.java, line(s) 14,10

中危 Firebase远程配置已启用

FIREBASE

Firebase远程配置URL （ https://firebaseremoteconfig.googleapis.com/v1/projects/877782508012/namespaces/firebase:fetch?key=AIzaSyA2Syrw9gGiSusguQDSMLtjf9rZBe5M7mY ） 已启用。请确保这些配置不包含敏感信息。响应内容如下所示：

{
    "entries": {
        "ab_testing_icon_home_and_reader": "base_line",
        "access_file_permission": "true",
        "ad_fullscreen_splash_timeout": "30",
        "ad_open_app_in_app": "inter_splash",
        "ad_open_app_other_app": "inter_splash",
        "ad_resume_docutalk": "true",
        "app_open_ad": "true",
        "app_open_ad_highfloor": "true",
        "app_ui_color": "false",
        "auto_scroll_native_fullscr": "true",
        "back_btn_onboarding": "false",
        "banner_book_introduction": "true",
        "banner_collap_read_file": "false",
        "banner_convert": "true",
        "banner_docutalk": "true",
        "banner_new": "true",
        "banner_permission": "true",
        "banner_read_files": "true",
        "banner_reading_book": "true",
        "banner_reload_time": "30000",
        "banner_splash": "true",
        "banner_splash_2floor": "false",
        "banner_templates": "true",
        "book_country": "9,10,11,12,13,16,17,18,19,20,21",
        "book_lock": "16,17,18,19,20,21,28,29,30,31,39,40,41",
        "change_id_Banner_new": "ca-app-pub-6530974883137971/3186474530",
        "change_id_Banner_new_all_prices": "ca-app-pub-6530974883137971/7622914817",
        "change_id_Banner_new_highfloor": "ca-app-pub-6530974883137971/9559922834",
        "change_id_Banner_new_medium": "ca-app-pub-6530974883137971/3186086172",
        "change_id_Native_result": "ca-app-pub-6530974883137971/1250909784",
        "change_id_Native_result_highfloor": "ca-app-pub-6530974883137971/1445409928",
        "change_id_Native_result_medium": "ca-app-pub-6530974883137971/6773720236",
        "change_id_Native_scan": "ca-app-pub-6530974883137971/3877073122",
        "change_id_Native_scan_highfloor": "ca-app-pub-6530974883137971/1876616776",
        "change_id_Native_scan_medium": "ca-app-pub-6530974883137971/6745800071",
        "change_id_ads_appopen_splash": "ca-app-pub-6530974883137971/1165948259",
        "change_id_appopen_resume": "ca-app-pub-6530974883137971/4293238035",
        "change_id_banner_convert": "ca-app-pub-4584260126367940/7636340102",
        "change_id_banner_docutalk": "ca-app-pub-6530974883137971/7833385574",
        "change_id_banner_docutalk_all_prices": "ca-app-pub-6530974883137971/5254157377",
        "change_id_banner_docutalk_highfloor": "ca-app-pub-6530974883137971/7648075361",
        "change_id_banner_docutalk_medium": "ca-app-pub-6530974883137971/1047007990",
        "change_id_banner_permission": "ca-app-pub-6530974883137971/3302733725",
        "change_id_banner_read_files": "ca-app-pub-6530974883137971/8574188730",
        "change_id_banner_read_files_all_prices": "ca-app-pub-6530974883137971/7814486503",
        "change_id_banner_read_files_highfloor": "ca-app-pub-6530974883137971/7247839866",
        "change_id_banner_read_files_medium": "ca-app-pub-6530974883137971/2187084876",
        "change_id_banner_templates": "ca-app-pub-4584260126367940/4068611017",
        "change_id_inter_file_highfloor": "ca-app-pub-6530974883137971/5366333516",
        "change_id_inter_getstarted": "ca-app-pub-6530974883137971/1459548916",
        "change_id_inter_splash_high_floor": "ca-app-pub-6530974883137971/8212333520",
        "change_id_inter_splash_medium": "ca-app-pub-6530974883137971/6627789113",
        "change_id_inter_splash_other_app": "ca-app-pub-6530974883137971/8232483041",
        "change_id_intersitial_file": "ca-app-pub-6530974883137971/6727829684",
        "change_id_intersitial_file_medium": "ca-app-pub-6530974883137971/2644292590",
        "change_id_intersitial_splash": "ca-app-pub-6530974883137971/6264795255",
        "change_id_native_highfloor": "ca-app-pub-6530974883137971/8175349748",
        "change_id_native_language": "ca-app-pub-6530974883137971/5619881707",
        "change_id_native_language_medium": "ca-app-pub-6530974883137971/9734963485",
        "cloud_file_more_action": "true",
        "cta_meta_native_lfo": "bold",
        "cta_meta_native_onboard": "bold",
        "docutalk_active": "false",
        "effect_list_files": "false",
        "enable_ump": "true",
        "file_news": "{   \"version\": 3,   \"data\": [     {       \"title\": \"All Document Reader: PDF, excel, word, Documents\",       \"content\": \"All in one office application \",       \"url_image\": \"http://139.180.154.184/image/all_document.png\",       \"image_local\": \"all_document.png\",       \"url_store\": \"https://play.google.com/store/apps/details?id=com.documentreader.documentapp.filereader\"     },     {       \"title\": \"PDF Reader - PDF Viewer\",       \"content\": \"Powerfull PDF Reader application\",       \"url_image\": \"http://139.180.154.184/image/pdf_reader.png\",       \"image_local\": \"pdf_reader.png\",       \"url_store\": \"https://play.google.com/store/apps/details?id=com.trustedapp.pdfreaderpdfviewer\"     },     {       \"title\": \"XLSX viewer - Excel Reader\",       \"content\": \"Read XLSX/XLS file on your device\",       \"url_image\": \"http://139.180.154.184/image/xlsx_reader.png\",       \"image_local\": \"xlsx_reader.png\",       \"url_store\": \"https://play.google.com/store/apps/details?id=com.xlsx.reader.xls.excel.viewer.spread.sheets\"     },     {       \"title\": \"PPT Reader - PPTX Viewer\",       \"content\": \"Read PPT/PPTX file on your device\",       \"url_image\": \"http://139.180.154.184/image/ppt_reader.png\",       \"image_local\": \"ppt_reader.png\",       \"url_store\": \"https://play.google.com/store/apps/details?id=com.pptx.viewer.ppt.reader.slides.viewer.free.app\"     },     {       \"title\": \"Scan & Generate QR Code\",       \"content\": \"Scan QR Code, Barcode, QR code generator\",       \"url_image\": \"http://139.180.154.184/image/qr_scanner.png\",       \"image_local\": \"qr_scanner.png\",       \"url_store\": \"https://play.google.com/store/apps/details?id=com.trustedapp.qrcodebarcode\"     },     {       \"title\": \"Calculator: Simple Calculator\",       \"content\": \"Including currency, units, health, world time...\",       \"url_image\": \"http://139.180.154.184/image/calulator_free.png\",       \"image_local\": \"calulator_free.png\",       \"url_store\": \"https://play.google.com/store/apps/details?id=com.calculatorapp.simplecalculator.calculator\"     },     {       \"title\": \"Documents Scanner - Free Scan, Make PDF File\",       \"content\": \"Document Scanner, scan with OCR, PDF converter\",       \"url_image\": \"http://139.180.154.184/image/document_scanner.png\",       \"image_local\": \"document_scanner.png\",       \"url_store\": \"https://play.google.com/store/apps/details?id=com.documentscan.simplescan.scanpdf\"     }   ] }",
        "flow_first_open_other": "false",
        "flow_noti_permission": "splash",
        "fo_ad_open_app_in_app": "inter_splash",
        "fo_ad_open_app_other_app": "inter_splash",
        "fo_banner_splash": "true",
        "fo_enable_auto_next_full_scr": "true",
        "fo_enable_lfo": "true",
        "fo_enable_onboarding": "true",
        "fo_enable_reload_full_scr": "true",
        "fo_fill_over_again_in": "false",
        "fo_fill_over_value": "15",
        "fo_group_expression": "false",
        "fo_group_expression3_2": "true",
        "fo_group_expression_3": "true",
        "fo_hf_banner_splash": "true",
        "fo_hf_inter_splash": "true",
        "fo_hf_native_full_scr1": "true",
        "fo_hf_native_full_scr2": "true",
        "fo_hf_native_language_1": "true",
        "fo_hf_native_language_2": "true",
        "fo_hf_native_onboarding1": "true",
        "fo_hf_native_onboarding2": "true",
        "fo_hf_native_onboarding3": "true",
        "fo_inter_splash": "true",
        "fo_logic_reload_native_by_time": "true",
        "fo_logic_reload_native_media_bottomsheet": "true",
        "fo_native_full_scr1": "false",
        "fo_native_full_scr2": "false",
        "fo_native_language_1": "true",
        "fo_native_language_2": "true",
        "fo_native_onboarding1": "true",
        "fo_native_onboarding2": "true",
        "fo_native_onboarding3": "true",
        "fo_refill_by_ad": "true",
        "fo_time_auto_next_full_scr": "3000",
        "fo_time_reload_native": "15",
        "hide_navigation_device": "true",
        "home_2floor": "true",
        "home_loading_banner": "sametime",
        "home_scr_animation_icon": "false",
        "inter_after_onboard": "true",
        "inter_create_back": "true",
        "inter_create_back_start": "1",
        "inter_create_back_step": "1",
        "inter_file_after_times": "1",
        "inter_file_high_floor": "sametime",
        "inter_file_jump": "1",
        "inter_getstarted": "true",
        "inter_scan_inapp": "true",
        "inter_scan_noti": "true",
        "inter_splash_2floor": "true",
        "inter_splash_3": "sametime",
        "inter_splash_high_floor": "sametime",
        "inter_splash_high_user_flow": "both",
        "inter_splash_noti_new_file": "true",
        "inter_splash_noti_screenshot": "false",
        "inter_splash_other": "true",
        "inter_splash_other_app_2floor": "true",
        "intersitial_file": "false",
        "intersitial_file_2floor": "false",
        "intersitial_splash": "true",
        "language_2floor": "false",
        "language_first_open": "new",
        "language_first_open_screen_2": "true",
        "lfo1_2floor": "true",
        "lfo2_2floor": "true",
        "lfo_language_default": "null",
        "lfo_ui_mediation": "only_meta",
        "lfo_ui_top_bar": "next_btn_blue_border_white",
        "logic_list_language": "true",
        "logic_native_home": "more_1_item",
        "max_mediation": "false",
        "media_native_lfo": "max",
        "my_book": "true",
        "native_ads_loading": "sametime",
        "native_exit": "false",
        "native_file": "false",
        "native_file_2floor": "true",
        "native_full_resist_meta": "full_meta",
        "native_fullscreen": "true",
        "native_fullscreen_2floor": "true",
        "native_home": "true",
        "native_language": "true",
        "native_language_2": "true",
        "native_loading": "true",
        "native_onboarding": "true",
        "native_onboarding_2": "true",
        "native_onboarding_3": "true",
        "native_result": "true",
        "native_save": "true",
        "native_scan": "true",
        "native_set_default": "true",
        "new_request_18_4_native_language": "v1",
        "new_sub": "new",
        "new_ui_language": "new1",
        "new_ui_permission": "new",
        "noti_hide_app": "true",
        "noti_lockscreen": "true",
        "noti_new_file": "true",
        "noti_screenshot": "true",
        "noti_service": "true",
        "noti_status_bar": "true",
        "notify_download_file": "true",
        "number_exit_show_rate": "1,2,3,5,7,9",
        "ob_ui_ads": "ad_native_medium",
        "onboarding_native_high_floor": "true",
        "onboarding_scr": "true",
        "onboarding_ui_mediation": "only_meta",
        "onboarding_ui_native_ad_type": "ad_native_media",
        "onboarding_ui_next_btn": "text_filled",
        "onboarding_ui_screens": "3",
        "open_setting_effect": "true",
        "optional_update_times_show": "3",
        "photo_album_more_action": "true",
        "popup_ebook": "false",
        "popup_exit": "true",
        "popup_gift_book": "true",
        "popup_gift_slot": "1",
        "popup_gift_time": "1",
        "popup_reading_reminder": "false",
        "preload_3_native_language": "old",
        "preload_3_native_result": "old",
        "preload_3_native_scan": "old",
        "preload_inter_3_file": "old",
        "preload_native_file": "true",
        "preload_native_language": "true",
        "preload_native_language_2": "true",
        "preload_native_onboarding": "true",
        "preload_native_save": "true",
        "rating": "new",
        "rating_back_file": "3,13,23,33,43",
        "rating_out_app": "1,3,5,7,9,11",
        "rating_scan_success": "3,5,7,10",
        "read_file_loading_banner": "sametime",
        "read_scr_new_icon": "false",
        "reader_2floor": "true",
        "reward_scan": "false",
        "set_default_open_file": "true",
        "set_default_scr": "true",
        "set_defaults_open_file_1st_show": "1",
        "show_rate": "true",
        "size_media_native_onboard": "max",
        "splash_ad_loading": "alternate",
        "star_review_in_app": "5",
        "step_show_set_default": "4",
        "storage_gg_drive": "true",
        "storage_gg_drive_new": "true",
        "storage_photo_album": "true",
        "sub_first_open": "true",
        "tessttt": "true",
        "time_auto_scroll_native_fullscr": "6000",
        "time_push_noti_1": "1",
        "time_push_noti_2": "1",
        "time_push_noti_3": "1",
        "time_push_noti_4": "1",
        "time_push_noti_5": "1",
        "time_push_noti_6": "2",
        "time_push_noti_7": "20",
        "time_push_noti_8": "3",
        "time_push_noti_9": "12",
        "time_push_noti_lockscreen": "21",
        "time_show_noti_permiss": "2",
        "time_show_popup": "1,3,5,7",
        "type_homepage": "v1",
        "ui_app": "new",
        "ui_banner_splash": "banner",
        "ui_onboarding_3": "onboard_3_ui_no_ad",
        "ui_splash_loading_bar": "false",
        "update_app": "off_pop_up_update"
    },
    "state": "UPDATE",
    "templateVersion": "2100"
}

中危此应用可能包含硬编码机密信息

SECRETS

从应用程序中识别出以下机密确保这些不是机密或私人信息
AppLovin广告SDK的=> "applovin.sdk.key" : "@string/sdk_key_applovin"
AdMob广告平台的=> "com.google.android.gms.ads.APPLICATION_ID" : "ca-app-pub-6530974883137971~4867953103"
"dyStrategy.privateAddress" : "privateAddress"
"facebook_app_id" : "3963036640489945"
"google_api_key" : "AIzaSyA2Syrw9gGiSusguQDSMLtjf9rZBe5M7mY"
"google_app_id" : "1:877782508012:android:659fd283b6824cd8c5e0c9"
"google_crash_reporting_api_key" : "AIzaSyA2Syrw9gGiSusguQDSMLtjf9rZBe5M7mY"
"sdk_key_applovin" : "3N4Mt8SNhOzkQnGb9oHsRRG1ItybcZDpJWN1fVAHLdRagxP-_k_ZXVaMAdMe5Otsmp6qJSXskfsrtakfRmPAGW"
"password_protected" : "Adgangskodebeskyttet"
258EAFA5-E914-47DA-95CA-C5AB0DC85B11
h7KsLkfPW+xUhoPwJ7JgY7K0DkeAWrfXYN==
FFE391E0EA186D0734ED601E4E70E3224B7309D48E2075BAC46D8C667EAE7212
bb2cf0647ba654d7228dd3f9405bbc6a
c56fb7d591ba6704df047fd98f535372fea00211
DFKwWgtuDkKwLZPwD+z8H+N/xj26Vjcdx5KyVj5GxVN=
DFKwWgtuDkKwLZPwD+z8H+N/xj26Vjcdx5KanjKnxVN=
936dcbdd57fe235fd7cf61c2e93da3c4
79EAC9E0-BAF9-11CE-8C82-00AA004BA90B
bacc4625-cafe-4ea3-bc52-eff006eee409
DFK/HrQgJ+zQW+xUhoPwJ7JgY7K0DkeAWrfXYN==
AEuhp4Izz50wTvd7YM9wWjPLp8hZY7jRPhBEcM9GAbTYSdUM
HSrCHRtOan6wp2kwOIGJC1RDtuSrF2mWVbio2aBcMHX9KF3iTJ1lLSzCKP1ZSo5yNolPNw1kCTtWpxELFF4ah1
8a3c4b262d721acd49a4bf97d5213199c86fa2b9
DkPtYdQTLkfAW+xUhoPwJ7JgY7K0DkeAWrfXYN==
cc2751449a350f668590264ed76692694a80308a
16FCAC8C0F7B0B4F186BCB8CEF3F71A1
3C094B5B177EB911F0CA60372AF12ECB
ed01172dc7edce0416bde7fa240784c2bd3c9d5a
Y7c14Z2TDbv/Y+xgHFeXDrcshBPUYFT=
LdxThdi1WBKUL75ULBPBD+QqJk2MWrfXYN==
LdxThdi1WBKUL75ULBPwJ7JgY7K0DkeAWrfXYN==
2438bce1ddb7bd026d5ff89f598b3b5e5bb824b3
C38FB23A402222A0C17D34A92F971D1F
h7KsLkfPW+xUhoPBD+QqJk2MWrfXYN==
026ae9c9824b3e483fa6c71fa88f57ae27816141
3BAF59A2E5331C30675FAB35FF5FFF0D116142D3D4664F1C3CB804068B40614F
7bf3a1e7bbd31e612eda3310c2cdb8075c43c6b5
9b8f518b086098de3d77736f9458a3d2f6f95a37
79EAC9D0-BAF9-11CE-8C82-00AA004BA90B
DFK/HrQgJ+zQW+xUhoPBD+QqJk2MWrfXYN==
0000016742C00BDA259000000168CE0F13200000016588840DCE7118A0002FBF1C31C3275D78
E3F9E1E0CF99D0E56A055BA65E241B3399F7CEA524326B0CDD6EC1327ED0FDC1
DFKwWgtuDkKwLZPwD+z8H+N/xjQZxVfV+T2SZVe6V2xS5c5n
FBA3AF4E7757D9016E953FB3EE4671CA2BD9AF725F9A53D52ED4A38EAAA08901
a4b7452e2ed8f5f191058ca7bbfd26b0d3214bfc
df6b721c8b4d3b6eb44c861d4415007e5a35fc95

信息应用程序记录日志信息,不得记录敏感信息

CODE

应用程序记录日志信息,不得记录敏感信息
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#logs

Files:
com/a/a/a/a/e/c.java, line(s) 18,11
com/adcolony/sdk/AdColonyAppOptions.java, line(s) 57,66
com/adcolony/sdk/g0.java, line(s) 61,79,83,204,67,272,73
com/adcolony/sdk/s0.java, line(s) 112,143,128
com/ads/control/admob/Admob.java, line(s) 256,316,360,372,392,424,452,482,511,540,573,612,645,708,740,774,808,986,1074,1170,1679,1691,1717,1749,1761,1989,2015,2057,2095,2121,2164,653,661,680,714,747,780,816,825,833,903,907,918,957,992,1137,1175,1200,1685,1723,1755,1806,1859,1887,1896,1914,2032,2064,2139,2173,2216,2217,2370,2375,2398,321,339,694,785,851,931,1056,1083,1087,1151,1185,1214,1781,1793,1796,1809,1830,1842,1846,1862,1926,1935,1980
com/ads/control/admob/AppOpenManager.java, line(s) 98,102,162,281,361,423,432,437,464,665,677,693,704,722,728,732,736,743,749,757,763,813,814,816,825,833,71,144,146,165,356,755
com/ads/control/ads/AperoAd.java, line(s) 232,233,239,240,246,247,253,254,260,261,301,321,335,354,380,418,555,588,616,654,1943,1963,1977,1996,2019,2059,430,437,1245,1262,1281,1298,1878,1924,225,286,727,777,829,831,836
com/ads/control/ads/nativeAds/AdmobRecyclerAdapter.java, line(s) 28,33,38,43,49
com/ads/control/ads/nativeAds/AperoAdPlacer.java, line(s) 121,87,184,191,198,205,212,219,226,233,240
com/ads/control/ads/nativeAds/AperoNativeAdView.java, line(s) 104
com/ads/control/applovin/AppLovin.java, line(s) 132,204,274,322,378,410,465,471,477,482,488,494,499,505,607,646,853,887,901,911,1035,1090,1096,1102,1107,1113,1119,1124,1130,124,196,309,327,405,587,600,632,641,719,726,732,803,810,816,933,1007,1055,1069,216,219,292,296,313,338,668,739,748,827,843
com/ads/control/applovin/AppOpenMax.java, line(s) 123,132,163,172,183,191,202,211,227,237,247,257,261,266,270,277,94
com/ads/control/billing/AppPurchase.java, line(s) 100,111,129,142,189,217,255,266,496,559,562,695,84,118,291,354,426,444,545
com/ads/control/event/AperoAppsflyer.java, line(s) 41,45,67,71,83,93
com/ads/control/event/AperoLogEventManager.java, line(s) 30,52,96,106
com/ads/control/widget/spinkit/animation/SpriteAnimatorBuilder.java, line(s) 168
com/apero/inappupdate/AppUpdate.java, line(s) 109,133,144,157,33,48,52,62,117,173,203
com/apero/inappupdate/AppUpdateManager.java, line(s) 60,135
com/apm/insight/b/j.java, line(s) 50
com/apm/insight/h/a.java, line(s) 47
com/apm/insight/k/k.java, line(s) 70
com/apm/insight/l/q.java, line(s) 44,26,32,38,8,20,14,50
com/applovin/exoplayer2/l/q.java, line(s) 29,69,39,59
com/applovin/impl/adview/activity/b/f.java, line(s) 614
com/applovin/impl/sdk/b/f.java, line(s) 75,81,92
com/applovin/impl/sdk/f.java, line(s) 100,102
com/applovin/impl/sdk/nativeAd/AppLovinMediaView.java, line(s) 150
com/applovin/impl/sdk/w.java, line(s) 48,70,105,66,113,74,121,78,97
com/applovin/mediation/rtb/AppLovinRtbBannerRenderer.java, line(s) 38,43,49,60,64,69,75
com/appsflyer/AFLogger.java, line(s) 43,62,69,41,92,101,112
com/appsflyer/internal/AFa1aSDK.java, line(s) 2084
com/appsflyer/internal/AFa1bSDK.java, line(s) 147,26,27,116,117,150,171
com/appsflyer/internal/AFc1cSDK.java, line(s) 29
com/appsflyer/internal/AFc1fSDK.java, line(s) 44
com/appsflyer/internal/AFc1hSDK.java, line(s) 67
com/appsflyer/internal/AFc1lSDK.java, line(s) 137,137,102,134,135,181,133,133,170
com/appsflyer/internal/AFc1nSDK.java, line(s) 42,83,18
com/appsflyer/internal/AFc1ySDK.java, line(s) 81,162
com/appsflyer/internal/AFd1hSDK.java, line(s) 70,20,36
com/appsflyer/internal/AFd1sSDK.java, line(s) 17
com/appsflyer/internal/AFd1uSDK.java, line(s) 67
com/appsflyer/internal/AFd1wSDK.java, line(s) 26,28,34
com/bykv/vk/openvk/component/video/a/b/d.java, line(s) 49,298,304,118,154,164,193,217,234,280,317,324,344,350,356,429
com/bykv/vk/openvk/component/video/a/b/e.java, line(s) 47,55
com/bykv/vk/openvk/component/video/a/b/f.java, line(s) 54,112,124,234
com/bykv/vk/openvk/component/video/a/b/g.java, line(s) 128,161,196,255,263,268,282,287,363,379,386,426,430,204,297,339,373,280,310
com/bykv/vk/openvk/component/video/a/c/a.java, line(s) 223,229,236,243,252,257,331,338,161,179,214,271,287
com/bykv/vk/openvk/component/video/api/f/c.java, line(s) 42,49,100,107,73,80,56,87
com/github/barteksc/pdfviewer/PDFView.java, line(s) 911,590,769,813,931
com/github/barteksc/pdfviewer/RenderingHandler.java, line(s) 77
com/github/barteksc/pdfviewer/link/DefaultLinkHandler.java, line(s) 29
com/iab/omid/library/adcolony/d/c.java, line(s) 18,11
com/iab/omid/library/applovin/d/c.java, line(s) 18,11
com/iab/omid/library/ironsrc/utils/d.java, line(s) 18,11
com/iab/omid/library/mmadbridge/utils/d.java, line(s) 18,11
com/iab/omid/library/vungle/d/c.java, line(s) 18,11
com/ironsource/a/b.java, line(s) 42
com/ironsource/adapters/ironsource/IronSourceAdapter.java, line(s) 591
com/ironsource/adapters/supersonicads/SupersonicAdsAdapter.java, line(s) 676
com/ironsource/b/a.java, line(s) 82,104
com/ironsource/environment/a.java, line(s) 43,365
com/ironsource/environment/e.java, line(s) 90,187,199,204,205
com/ironsource/environment/k.java, line(s) 66
com/ironsource/lifecycle/a/a.java, line(s) 59
com/ironsource/mediationsdk/C1222p.java, line(s) 187
com/ironsource/mediationsdk/L.java, line(s) 505,507,515,517,1370,1393
com/ironsource/mediationsdk/bidding/b.java, line(s) 46
com/ironsource/mediationsdk/integration/IntegrationHelper.java, line(s) 73,31,36,95,109,113,127,132,27,34,61,86,92,105,123,130
com/ironsource/mediationsdk/logger/a.java, line(s) 34,27,23,29
com/ironsource/sdk/a/d.java, line(s) 39
com/ironsource/sdk/b/b.java, line(s) 34,60,99
com/ironsource/sdk/c/c.java, line(s) 116,185
com/ironsource/sdk/controller/x.java, line(s) 329,337,417,917,1012,1032,1061,1081,1103,1123,1149,1169,1198,1355,1373,2036,1810
com/ironsource/sdk/service/Connectivity/a.java, line(s) 50
com/ironsource/sdk/service/Connectivity/e.java, line(s) 82,96
com/ironsource/sdk/service/d.java, line(s) 48
com/ironsource/sdk/utils/Logger.java, line(s) 12,18,24,30,40,48,53,59,65,71
com/itextpdf/text/FontFactoryImp.java, line(s) 197
com/itextpdf/text/pdf/BarcodePDF417.java, line(s) 747
com/itextpdf/text/pdf/GlyphList.java, line(s) 58
com/itextpdf/text/pdf/PdfCopy.java, line(s) 446
com/itextpdf/text/pdf/PdfLister.java, line(s) 87
com/itextpdf/text/pdf/Type1Font.java, line(s) 75
com/itextpdf/text/pdf/codec/Base64.java, line(s) 396,499,522,896,1111,1112,439,448,449
com/itextpdf/text/pdf/hyphenation/HyphenationTree.java, line(s) 195
com/itextpdf/text/pdf/hyphenation/SimplePatternParser.java, line(s) 57,62,67
com/itextpdf/text/pdf/hyphenation/TernaryTree.java, line(s) 425,426,427
com/itextpdf/text/pdf/parser/LocationTextExtractionStrategy.java, line(s) 45,51,52,81
com/itextpdf/text/pdf/parser/PdfContentReaderTool.java, line(s) 129,141,146
com/jirbo/adcolony/AdColonyAdListener.java, line(s) 93
com/jirbo/adcolony/AdColonyAdapter.java, line(s) 87,71,93,116,81,105
com/jirbo/adcolony/AdColonyBannerAdListener.java, line(s) 75
com/mbridge/msdk/dycreator/a/a.java, line(s) 45,58,163,164,165,170,176,178,260
com/mbridge/msdk/dycreator/baseview/MBScrollView.java, line(s) 74
com/mbridge/msdk/dycreator/baseview/extview/MBExtAcquireRewardPopView.java, line(s) 278
com/mbridge/msdk/dycreator/baseview/extview/MBExtFeedBackView.java, line(s) 261
com/mbridge/msdk/dycreator/baseview/extview/MBExtMBridgeBaitClickView.java, line(s) 278
com/mbridge/msdk/dycreator/baseview/extview/MBExtMBridgeTextView.java, line(s) 270
com/mbridge/msdk/dycreator/bus/BackgroundPoster.java, line(s) 40
com/mbridge/msdk/dycreator/bus/EventBus.java, line(s) 315,106,111,113,434,452,467
com/mbridge/msdk/dycreator/e/g.java, line(s) 11
com/mbridge/msdk/foundation/same/b/e.java, line(s) 37
com/mbridge/msdk/foundation/same/report/b/a.java, line(s) 221
com/mbridge/msdk/foundation/tools/u.java, line(s) 22
com/mbridge/msdk/foundation/tools/x.java, line(s) 42,63,77,56,49,70
com/mbridge/msdk/mbnative/controller/NativeController.java, line(s) 1804
com/mbridge/msdk/mbnative/controller/b.java, line(s) 445
com/mbridge/msdk/mbnative/d/b.java, line(s) 98,113
com/mbridge/msdk/playercommon/exoplayer2/DefaultRenderersFactory.java, line(s) 92
com/mbridge/msdk/playercommon/exoplayer2/ExoPlayerImpl.java, line(s) 125,486,505
com/mbridge/msdk/playercommon/exoplayer2/ExoPlayerImplInternal.java, line(s) 621,836,1167,1172,1177,1245
com/mbridge/msdk/playercommon/exoplayer2/MediaPeriodHolder.java, line(s) 204
com/mbridge/msdk/playercommon/exoplayer2/SimpleExoPlayer.java, line(s) 291,840
com/mbridge/msdk/playercommon/exoplayer2/audio/DefaultAudioSink.java, line(s) 621,160,169,178,652
com/mbridge/msdk/playercommon/exoplayer2/drm/ClearKeyUtil.java, line(s) 44
com/mbridge/msdk/playercommon/exoplayer2/drm/DefaultDrmSession.java, line(s) 181,319
com/mbridge/msdk/playercommon/exoplayer2/drm/DefaultDrmSessionManager.java, line(s) 279
com/mbridge/msdk/playercommon/exoplayer2/extractor/mkv/MatroskaExtractor.java, line(s) 480
com/mbridge/msdk/playercommon/exoplayer2/extractor/mp3/VbriSeeker.java, line(s) 66
com/mbridge/msdk/playercommon/exoplayer2/extractor/mp3/XingSeeker.java, line(s) 51
com/mbridge/msdk/playercommon/exoplayer2/extractor/mp4/FragmentedMp4Extractor.java, line(s) 273,1013
com/mbridge/msdk/playercommon/exoplayer2/extractor/mp4/MetadataUtil.java, line(s) 170,58,65,71,191,235,247,257
com/mbridge/msdk/playercommon/exoplayer2/extractor/mp4/PsshAtomUtil.java, line(s) 68,92
com/mbridge/msdk/playercommon/exoplayer2/extractor/mp4/TrackEncryptionBox.java, line(s) 62
com/mbridge/msdk/playercommon/exoplayer2/extractor/ogg/VorbisUtil.java, line(s) 208
com/mbridge/msdk/playercommon/exoplayer2/extractor/ts/AdtsReader.java, line(s) 113
com/mbridge/msdk/playercommon/exoplayer2/extractor/ts/H265Reader.java, line(s) 247
com/mbridge/msdk/playercommon/exoplayer2/extractor/ts/Id3Reader.java, line(s) 32
com/mbridge/msdk/playercommon/exoplayer2/extractor/ts/PesReader.java, line(s) 57,110,113
com/mbridge/msdk/playercommon/exoplayer2/extractor/wav/WavHeaderReader.java, line(s) 48
com/mbridge/msdk/playercommon/exoplayer2/mediacodec/MediaCodecInfo.java, line(s) 78,82,41
com/mbridge/msdk/playercommon/exoplayer2/mediacodec/MediaCodecRenderer.java, line(s) 592
com/mbridge/msdk/playercommon/exoplayer2/mediacodec/MediaCodecUtil.java, line(s) 360,363,486,257,266,275,282,285,315,402,407,415,424
com/mbridge/msdk/playercommon/exoplayer2/metadata/id3/Id3Decoder.java, line(s) 196,201,210,221,374
com/mbridge/msdk/playercommon/exoplayer2/offline/DownloadManager.java, line(s) 321,461
com/mbridge/msdk/playercommon/exoplayer2/offline/DownloadService.java, line(s) 146
com/mbridge/msdk/playercommon/exoplayer2/source/chunk/BaseMediaChunkOutput.java, line(s) 48
com/mbridge/msdk/playercommon/exoplayer2/source/chunk/ChunkedTrackBlacklistUtil.java, line(s) 25,27
com/mbridge/msdk/playercommon/exoplayer2/text/cea/Cea708Decoder.java, line(s) 886,449,453,457,558,735,746,785,797,820,834
com/mbridge/msdk/playercommon/exoplayer2/text/cea/CeaUtil.java, line(s) 27
com/mbridge/msdk/playercommon/exoplayer2/text/dvb/DvbParser.java, line(s) 577
com/mbridge/msdk/playercommon/exoplayer2/text/ssa/SsaDecoder.java, line(s) 49,54,59,68
com/mbridge/msdk/playercommon/exoplayer2/text/subrip/SubripDecoder.java, line(s) 44,72,75
com/mbridge/msdk/playercommon/exoplayer2/text/ttml/TtmlDecoder.java, line(s) 618,89,100,115,296,301,310,315,344,348,442,451,463,629
com/mbridge/msdk/playercommon/exoplayer2/text/webvtt/WebvttCue.java, line(s) 60
com/mbridge/msdk/playercommon/exoplayer2/text/webvtt/WebvttCueParser.java, line(s) 145,333,353,356,489,562
com/mbridge/msdk/playercommon/exoplayer2/upstream/DefaultDataSource.java, line(s) 81
com/mbridge/msdk/playercommon/exoplayer2/upstream/DefaultHttpDataSource.java, line(s) 80
com/mbridge/msdk/playercommon/exoplayer2/upstream/Loader.java, line(s) 121,171,177,189
com/mbridge/msdk/playercommon/exoplayer2/upstream/cache/CachedRegionTracker.java, line(s) 121
com/mbridge/msdk/playercommon/exoplayer2/upstream/cache/SimpleCache.java, line(s) 115
com/mbridge/msdk/playercommon/exoplayer2/util/AtomicFile.java, line(s) 35,93
com/mbridge/msdk/playercommon/exoplayer2/util/EventLogger.java, line(s) 154,158
com/mbridge/msdk/playercommon/exoplayer2/util/Util.java, line(s) 480,494
com/mbridge/msdk/playercommon/exoplayer2/video/DummySurface.java, line(s) 73,79
com/mbridge/msdk/playercommon/exoplayer2/video/MediaCodecVideoRenderer.java, line(s) 843,454,460,678
com/mbridge/msdk/video/module/MBridgeBaseView.java, line(s) 186,198
com/mbridge/msdk/widget/FeedbackRadioGroup.java, line(s) 64
com/rate/control/dialog/CustomRateAppDialog.java, line(s) 47
com/rate/control/dialog/RateAppWithReason.java, line(s) 47
com/shockwave/pdfium/PdfiumCore.java, line(s) 43,35,321,325,355,359
com/tom_roush/fontbox/afm/AFMParser.java, line(s) 116
com/tom_roush/fontbox/cff/Type1CharString.java, line(s) 56,71,211,217,237,260,274,284
com/tom_roush/fontbox/cff/Type1CharStringParser.java, line(s) 63
com/tom_roush/fontbox/ttf/CmapSubtable.java, line(s) 188,213,229,243,335
com/tom_roush/fontbox/ttf/GlyfCompositeDescript.java, line(s) 59,71,98,105,142
com/tom_roush/fontbox/ttf/KerningSubtable.java, line(s) 132,151,158
com/tom_roush/fontbox/ttf/KerningTable.java, line(s) 43
com/tom_roush/fontbox/type1/Type1Lexer.java, line(s) 146
com/tom_roush/pdfbox/contentstream/PDFStreamEngine.java, line(s) 173,175,180,334,379
com/tom_roush/pdfbox/contentstream/operator/graphics/ClosePath.java, line(s) 18
com/tom_roush/pdfbox/contentstream/operator/graphics/CurveTo.java, line(s) 32
com/tom_roush/pdfbox/contentstream/operator/graphics/CurveToReplicateInitialPoint.java, line(s) 30
com/tom_roush/pdfbox/contentstream/operator/graphics/LineTo.java, line(s) 24
com/tom_roush/pdfbox/contentstream/operator/text/MoveText.java, line(s) 30
com/tom_roush/pdfbox/cos/COSDocument.java, line(s) 163,202,52,122,166,205,252
com/tom_roush/pdfbox/cos/COSString.java, line(s) 67
com/tom_roush/pdfbox/filter/CCITTFaxFilter.java, line(s) 65
com/tom_roush/pdfbox/filter/DCTFilter.java, line(s) 32
com/tom_roush/pdfbox/filter/Filter.java, line(s) 27
com/tom_roush/pdfbox/filter/FlateFilter.java, line(s) 65
com/tom_roush/pdfbox/filter/LZWFilter.java, line(s) 77
com/tom_roush/pdfbox/filter/RunLengthDecodeFilter.java, line(s) 42
com/tom_roush/pdfbox/io/ScratchFile.java, line(s) 70
com/tom_roush/pdfbox/pdfparser/BaseParser.java, line(s) 104,213
com/tom_roush/pdfbox/pdfparser/COSParser.java, line(s) 232,283,362,373,661,671,772,999,275,280,893,494,617,624,716,741,744,869,936,951
com/tom_roush/pdfbox/pdfparser/FDFParser.java, line(s) 38
com/tom_roush/pdfbox/pdfparser/PDFParser.java, line(s) 79,91
com/tom_roush/pdfbox/pdfparser/PDFStreamParser.java, line(s) 76
com/tom_roush/pdfbox/pdfparser/XrefTrailerResolver.java, line(s) 105,114,130,153,165
com/tom_roush/pdfbox/pdfwriter/COSWriter.java, line(s) 303
com/tom_roush/pdfbox/pdmodel/PDDocument.java, line(s) 496,628,532
com/tom_roush/pdfbox/pdmodel/PDPage.java, line(s) 171
com/tom_roush/pdfbox/pdmodel/PDPageContentStream.java, line(s) 96
com/tom_roush/pdfbox/pdmodel/common/PDNameTreeNode.java, line(s) 59,147
com/tom_roush/pdfbox/pdmodel/common/PDNumberTreeNode.java, line(s) 128
com/tom_roush/pdfbox/pdmodel/documentinterchange/logicalstructure/PDStructureTreeRoot.java, line(s) 72
com/tom_roush/pdfbox/pdmodel/documentinterchange/taggedpdf/StandardStructureTypes.java, line(s) 68,70
com/tom_roush/pdfbox/pdmodel/encryption/SecurityHandler.java, line(s) 130
com/tom_roush/pdfbox/pdmodel/encryption/StandardSecurityHandler.java, line(s) 216,312,316,321
com/tom_roush/pdfbox/pdmodel/fdf/FDFAnnotation.java, line(s) 119,128,248,225
com/tom_roush/pdfbox/pdmodel/fdf/FDFAnnotationInk.java, line(s) 51
com/tom_roush/pdfbox/pdmodel/fdf/FDFAnnotationPolygon.java, line(s) 48
com/tom_roush/pdfbox/pdmodel/fdf/FDFAnnotationPolyline.java, line(s) 60
com/tom_roush/pdfbox/pdmodel/fdf/FDFDictionary.java, line(s) 53,58,70,119,122
com/tom_roush/pdfbox/pdmodel/font/FileSystemFontProvider.java, line(s) 257,268,271,274,287,212,214,234,260,292,330,333,361,370,183,189,231,195,319,363
com/tom_roush/pdfbox/pdmodel/font/FontMapper.java, line(s) 354,358,360
com/tom_roush/pdfbox/pdmodel/font/PDCIDFontType2.java, line(s) 97,101
com/tom_roush/pdfbox/pdmodel/font/PDFont.java, line(s) 182,72
com/tom_roush/pdfbox/pdmodel/font/PDFontFactory.java, line(s) 39,65
com/tom_roush/pdfbox/pdmodel/font/PDSimpleFont.java, line(s) 56,185,243,245
com/tom_roush/pdfbox/pdmodel/font/PDType0Font.java, line(s) 115,276
com/tom_roush/pdfbox/pdmodel/font/PDType1Font.java, line(s) 122,165
com/tom_roush/pdfbox/pdmodel/font/PDType3Font.java, line(s) 138
com/tom_roush/pdfbox/pdmodel/font/encoding/GlyphList.java, line(s) 81,141,145,147,156,159
com/tom_roush/pdfbox/pdmodel/graphics/color/PDColorSpace.java, line(s) 29
com/tom_roush/pdfbox/pdmodel/graphics/color/PDDeviceGray.java, line(s) 46
com/tom_roush/pdfbox/pdmodel/graphics/color/PDDeviceRGB.java, line(s) 49
com/tom_roush/pdfbox/pdmodel/graphics/image/PDImageXObject.java, line(s) 295
com/tom_roush/pdfbox/pdmodel/graphics/image/SampledImageReader.java, line(s) 161,85
com/tom_roush/pdfbox/pdmodel/graphics/predictor/PredictorAlgorithm.java, line(s) 12,14,26,37
com/tom_roush/pdfbox/pdmodel/graphics/state/PDSoftMask.java, line(s) 30,36
com/tom_roush/pdfbox/pdmodel/interactive/annotation/PDAnnotation.java, line(s) 81,165
com/tom_roush/pdfbox/pdmodel/interactive/digitalsignature/visible/PDFTemplateCreator.java, line(s) 25,66
com/tom_roush/pdfbox/pdmodel/interactive/digitalsignature/visible/PDVisibleSigBuilder.java, line(s) 35,54,68,74,84,95,105,111,117,133,139,145,155,161,167,173,185,199,205,215,227,240,249,265,275,281
com/tom_roush/pdfbox/rendering/CIDType0Glyph2D.java, line(s) 32,38
com/tom_roush/pdfbox/rendering/PageDrawer.java, line(s) 309
com/tom_roush/pdfbox/rendering/TTFGlyph2D.java, line(s) 71,73
com/tom_roush/pdfbox/rendering/Type1Glyph2D.java, line(s) 41,32
com/tom_roush/pdfbox/text/PDFTextStreamEngine.java, line(s) 103
com/tom_roush/pdfbox/text/TextPosition.java, line(s) 263
com/tom_roush/pdfbox/util/PDFBoxResourceLoader.java, line(s) 35
com/tom_roush/pdfbox/util/PDFHighlighter.java, line(s) 48
com/trustedapp/pdfreader/data/DbHelper.java, line(s) 142,194
com/trustedapp/pdfreader/service/FileDownloadReceiverService.java, line(s) 62,66,106,119,125
com/trustedapp/pdfreader/service/MyFirebaseMessagingService.java, line(s) 15,17,21,27
com/trustedapp/pdfreader/utils/CommonUtils.java, line(s) 183,302
com/trustedapp/pdfreader/utils/FileUtils.java, line(s) 144,303,581
com/trustedapp/pdfreader/utils/FirebaseAnalyticsUtils.java, line(s) 290,298,306,314,322
com/trustedapp/pdfreader/utils/RealPathUtil.java, line(s) 40,43,45,57,73,75,85,131
com/trustedapp/pdfreader/utils/SharePreferenceUtils.java, line(s) 197
com/trustedapp/pdfreader/utils/TestHttpClient.java, line(s) 17,23
com/trustedapp/pdfreader/utils/Tools.java, line(s) 99,140
com/trustedapp/pdfreader/utils/Utils.java, line(s) 411
com/trustedapp/pdfreader/view/activity/MainActivity.java, line(s) 160,266,92,96
com/trustedapp/pdfreader/view/activity/MainV1Activity.java, line(s) 550,168,172
com/trustedapp/pdfreader/view/activity/PdfReaderActivity.java, line(s) 403,407,416,629,578,612,625
com/trustedapp/pdfreader/view/activity/ReadAllDocActivity.java, line(s) 260,264,265,296,297,624,713,1037
com/trustedapp/pdfreader/view/activity/ShareImageActivity.java, line(s) 72,80,205
com/trustedapp/pdfreader/view/activity/SplashActivity.java, line(s) 561,623
com/trustedapp/pdfreader/view/adapter/BookmarkListAdapter.java, line(s) 152,157
com/trustedapp/pdfreader/view/adapter/PdfFileListAdapter.java, line(s) 189,194
com/trustedapp/pdfreader/view/base/BaseActivity.java, line(s) 120
com/trustedapp/pdfreader/view/dialog/CreateNewPdfDialog.java, line(s) 233
com/trustedapp/pdfreader/view/fragment/AllFileFragment.java, line(s) 404
com/unity3d/ads/UnityAdsBaseOptions.java, line(s) 22
com/unity3d/ads/metadata/InAppPurchaseMetaData.java, line(s) 28,41,55
com/unity3d/ads/metadata/MetaData.java, line(s) 42,57
com/unity3d/services/UnityServices.java, line(s) 41,78,85,90,98,104,117,123,111,113,127,54
com/unity3d/services/ads/UnityAdsImplementation.java, line(s) 100,77
com/unity3d/services/ads/adunit/AdUnitActivity.java, line(s) 363,365,49,126,184,218,260,292,313,381,223
com/unity3d/services/ads/adunit/AdUnitViewHandlerFactory.java, line(s) 22
com/unity3d/services/ads/adunit/VideoPlayerHandler.java, line(s) 17,35
com/unity3d/services/ads/api/AdUnit.java, line(s) 202,208,257,260,264,267,324,327,330,333,360,110,132,155,162,338,351,363,367,407,498
com/unity3d/services/ads/api/VideoPlayer.java, line(s) 60,78,101,119,170,181
com/unity3d/services/ads/api/WebPlayer.java, line(s) 53
com/unity3d/services/ads/configuration/AdsModuleConfiguration.java, line(s) 63,74,82
com/unity3d/services/ads/gmascar/adapters/ScarAdapterFactory.java, line(s) 45
com/unity3d/services/ads/gmascar/bridges/AdapterStatusBridge.java, line(s) 21,39
com/unity3d/services/ads/gmascar/bridges/InitializeListenerBridge.java, line(s) 21,40
com/unity3d/services/ads/gmascar/bridges/mobileads/MobileAdsBridge.java, line(s) 20
com/unity3d/services/ads/gmascar/bridges/mobileads/MobileAdsBridgeLegacy.java, line(s) 22
com/unity3d/services/ads/gmascar/finder/GMAInitializer.java, line(s) 53
com/unity3d/services/ads/gmascar/finder/ScarVersionFinder.java, line(s) 37,49
com/unity3d/services/ads/token/AsyncTokenStorage.java, line(s) 155,189
com/unity3d/services/ads/token/NativeTokenGenerator.java, line(s) 41
com/unity3d/services/ads/video/VideoPlayerView.java, line(s) 55,58,82,122,127,149,192,204,238
com/unity3d/services/ads/webplayer/WebPlayerView.java, line(s) 64,74,397,413,509,551,609,624,638,650
com/unity3d/services/banners/BannerView.java, line(s) 127
com/unity3d/services/banners/UnityBanners.java, line(s) 329
com/unity3d/services/core/api/Cache.java, line(s) 162,176,52,128,181
com/unity3d/services/core/api/DeviceInfo.java, line(s) 150,168,189,327,353,367,420
com/unity3d/services/core/api/Intent.java, line(s) 48,62,208,232,247
com/unity3d/services/core/api/Request.java, line(s) 33,45,96,108,126,138
com/unity3d/services/core/api/Sdk.java, line(s) 17,38,54,80,86,92,98
com/unity3d/services/core/broadcast/BroadcastEventReceiver.java, line(s) 36
com/unity3d/services/core/cache/CacheDirectory.java, line(s) 25,27,67,71,81,106,110,116,123,30,60,76
com/unity3d/services/core/cache/CacheThread.java, line(s) 74
com/unity3d/services/core/cache/CacheThreadHandler.java, line(s) 43,46,50,71
com/unity3d/services/core/configuration/ConfigurationReader.java, line(s) 25
com/unity3d/services/core/configuration/ConfigurationRequestFactory.java, line(s) 39
com/unity3d/services/core/configuration/EnvironmentCheck.java, line(s) 32,45,35,48,51,54,57
com/unity3d/services/core/configuration/ExperimentObject.java, line(s) 24
com/unity3d/services/core/configuration/ExperimentsReader.java, line(s) 24
com/unity3d/services/core/configuration/InitializationNotificationCenter.java, line(s) 47
com/unity3d/services/core/configuration/InitializeEventsMetricSender.java, line(s) 41,51,59,69,164,176
com/unity3d/services/core/configuration/InitializeThread.java, line(s) 276,312,443,458,502,510,608,620,646,702,122,285,288,319,322,365,385,557,594,706,857,866,193,346,452,534
com/unity3d/services/core/configuration/PrivacyConfigurationLoader.java, line(s) 51
com/unity3d/services/core/connectivity/ConnectivityMonitor.java, line(s) 57,85,95,77,125
com/unity3d/services/core/device/AdvertisingId.java, line(s) 126,144,154
com/unity3d/services/core/device/Device.java, line(s) 163,467,516,525,280
com/unity3d/services/core/device/OpenAdvertisingId.java, line(s) 128,150,157
com/unity3d/services/core/device/Storage.java, line(s) 47,51,58
com/unity3d/services/core/device/reader/DeviceInfoReaderCompressor.java, line(s) 20,33
com/unity3d/services/core/device/reader/DeviceInfoReaderExtended.java, line(s) 46
com/unity3d/services/core/domain/task/InitializeStateConfig$doWork$2.java, line(s) 52
com/unity3d/services/core/domain/task/InitializeStateCreate$doWork$2.java, line(s) 52,58,89
com/unity3d/services/core/domain/task/InitializeStateCreateWithRemote$doWork$2.java, line(s) 52,57,88
com/unity3d/services/core/domain/task/InitializeStateError$doWork$2.java, line(s) 49
com/unity3d/services/core/domain/task/InitializeStateLoadCache$doWork$2.java, line(s) 53,60
com/unity3d/services/core/domain/task/InitializeStateLoadCache.java, line(s) 78
com/unity3d/services/core/domain/task/InitializeStateLoadConfigFile$doWork$2.java, line(s) 53,61
com/unity3d/services/core/domain/task/InitializeStateNetworkError$doWork$2.java, line(s) 50
com/unity3d/services/core/domain/task/InitializeStateNetworkError.java, line(s) 104,122
com/unity3d/services/core/log/DeviceLog.java, line(s) 70,217,224
com/unity3d/services/core/misc/JsonFlattener.java, line(s) 43
com/unity3d/services/core/misc/JsonStorage.java, line(s) 155,26,32,51,72,84,96,164,170
com/unity3d/services/core/misc/JsonStorageAggregator.java, line(s) 34
com/unity3d/services/core/misc/Utilities.java, line(s) 36,54
com/unity3d/services/core/misc/ViewUtilities.java, line(s) 26,35
com/unity3d/services/core/preferences/AndroidPreferences.java, line(s) 14,26,38,50,62
com/unity3d/services/core/properties/ClientProperties.java, line(s) 39,70,82,84
com/unity3d/services/core/properties/SdkProperties.java, line(s) 221,223,97
com/unity3d/services/core/reflection/GenericBridge.java, line(s) 32,47,56,62,70,76,84,91
com/unity3d/services/core/request/WebRequest.java, line(s) 84,177,183
com/unity3d/services/core/request/WebRequestRunnable.java, line(s) 91,76,95
com/unity3d/services/core/request/WebRequestThread.java, line(s) 61,123,137
com/unity3d/services/core/request/metrics/MetricCommonTags.java, line(s) 64
com/unity3d/services/core/request/metrics/MetricSender.java, line(s) 60,76,80,93,95,98,104
com/unity3d/services/core/request/metrics/MetricSenderWithBatch.java, line(s) 47
com/unity3d/services/core/request/metrics/SDKMetrics.java, line(s) 37,52,62,86,97
com/unity3d/services/core/sensorinfo/SensorInfoListener.java, line(s) 28
com/unity3d/services/core/timer/BaseTimer.java, line(s) 81
com/unity3d/services/core/webview/WebView.java, line(s) 112,31,41,58
com/unity3d/services/core/webview/WebViewApp.java, line(s) 54,99,196,241,285,335,61,65,68,85,133,148,175,277,307,348
com/unity3d/services/core/webview/WebViewUrlBuilder.java, line(s) 25
com/unity3d/services/core/webview/bridge/Invocation.java, line(s) 72
com/unity3d/services/core/webview/bridge/NativeCallback.java, line(s) 45
com/unity3d/services/core/webview/bridge/WebViewBridge.java, line(s) 59
com/unity3d/services/core/webview/bridge/WebViewBridgeInterface.java, line(s) 20,35
com/unity3d/services/core/webview/bridge/WebViewCallback.java, line(s) 50
com/unity3d/services/store/core/StoreLifecycleListener.java, line(s) 43
com/unity3d/services/store/gpbl/bridges/CommonJsonResponseBridge.java, line(s) 38
com/unity3d/services/store/gpbl/bridges/PurchaseBridge.java, line(s) 37
com/vungle/mediation/VungleBannerAdapter.java, line(s) 66,76,87,95,111,134,164,42,48,142,242
com/vungle/mediation/VungleInterstitialAdapter.java, line(s) 61,66,75,83,107,129,131,46,97,110,117,124,140,153,163,222
com/vungle/mediation/VungleManager.java, line(s) 59,126,135,139,143,149,153,80,75,97,100,61,67
com/vungle/warren/AdActivity.java, line(s) 135,137,208,225,239
com/vungle/warren/AdEventListener.java, line(s) 138,95,107
com/vungle/warren/AdLoader.java, line(s) 374,461,545,727,771,792,873,1035,1277,115,337,441,449,709,1019,1051,776,1310,1322,770,1105
com/vungle/warren/AdvertisementPresentationFactory.java, line(s) 233,236,103,108,119,127,131,202,227,299,322,329,358,402,407,418,425
com/vungle/warren/Banners.java, line(s) 29,34,38,43,56,95,109
com/vungle/warren/CacheBustManager.java, line(s) 28
com/vungle/warren/NativeAd.java, line(s) 204,177,172,402
com/vungle/warren/NativeAdLayout.java, line(s) 99,116,131,137,144,154,162,181,187,199,250
com/vungle/warren/Plugin.java, line(s) 14,29
com/vungle/warren/SessionTracker.java, line(s) 119,122,102,219
com/vungle/warren/Vungle.java, line(s) 431,463,517,706,713,175,179,184,195,212,243,346,405,506,530,543,639,649,659,686,791,818,837,892,951,1006,1013,1034,1052,1057,1080,1086,1096
com/vungle/warren/VungleApiClient.java, line(s) 238,555,721,404,421,501,558,562,575,680,591,617,620,626
com/vungle/warren/VungleBanner.java, line(s) 39,47,64,97,118,125,136,156,177,179
com/vungle/warren/VungleJobRunner.java, line(s) 120
com/vungle/warren/VungleLogger.java, line(s) 42,61,95,104,50,72,83,123,134
com/vungle/warren/analytics/VungleAnalytics.java, line(s) 82,87,44,45,48,50,53,99
com/vungle/warren/downloader/AssetDownloader.java, line(s) 144,161,240,245,317,377,394,476,498,553,556,559,563,574,581,601,606,628,644,654,663,664,666,672,679,724,726,729,731,799,889,691,780,803,848,877
com/vungle/warren/downloader/CleverCache.java, line(s) 61,111,121,289,298,302,308,322,328,343,362,366,379
com/vungle/warren/log/BaseFilePersistor.java, line(s) 92,106
com/vungle/warren/log/LogManager.java, line(s) 107,112,120,125,138
com/vungle/warren/log/LogPersister.java, line(s) 98,85,113,43,76,102
com/vungle/warren/log/LogSender.java, line(s) 67,101
com/vungle/warren/model/Advertisement.java, line(s) 561
com/vungle/warren/network/OkHttpCall.java, line(s) 119,132
com/vungle/warren/persistence/CacheManager.java, line(s) 67
com/vungle/warren/persistence/FutureResult.java, line(s) 31,45,27,41,48
com/vungle/warren/persistence/GraphicDesigner.java, line(s) 32,86
com/vungle/warren/persistence/Repository.java, line(s) 89,97,103,238,473,479,524,534,946,949,295,334,549,978
com/vungle/warren/tasks/CacheBustJob.java, line(s) 45,97,116,126,190,60,132,144,157,184,193,196,155
com/vungle/warren/tasks/CleanupJob.java, line(s) 44,73,82,84,101,92,63
com/vungle/warren/tasks/JobInfo.java, line(s) 49
com/vungle/warren/tasks/SendReportsJob.java, line(s) 43,52
com/vungle/warren/tasks/runnable/JobRunnable.java, line(s) 39,47,49,55,41,59,61
com/vungle/warren/ui/JavascriptBridge.java, line(s) 23
com/vungle/warren/ui/presenter/LocalAdPresenter.java, line(s) 324,120
com/vungle/warren/ui/presenter/MRAIDAdPresenter.java, line(s) 288
com/vungle/warren/ui/presenter/NativeAdPresenter.java, line(s) 167,191,198,236,282,297,307
com/vungle/warren/ui/view/BaseAdView.java, line(s) 105,109
com/vungle/warren/ui/view/FullAdWidget.java, line(s) 462,306,415
com/vungle/warren/ui/view/LocalAdView.java, line(s) 165,109,95
com/vungle/warren/ui/view/NativeAdView.java, line(s) 114
com/vungle/warren/ui/view/VungleBannerView.java, line(s) 237,249,253
com/vungle/warren/ui/view/VungleWebClient.java, line(s) 148,246,285,180,181,190,191,200,201,248,66,208
com/vungle/warren/utility/ActivityManager.java, line(s) 103
com/vungle/warren/utility/CookieUtil.java, line(s) 28
com/vungle/warren/utility/ExternalRouter.java, line(s) 39,25,38
com/vungle/warren/utility/FileUtility.java, line(s) 166,177,185,297,70,73
com/vungle/warren/utility/ImageLoader.java, line(s) 40,42,59
com/vungle/warren/utility/ImpressionTracker.java, line(s) 116,121
com/vungle/warren/utility/NetworkProvider.java, line(s) 136,112
com/vungle/warren/utility/UnzipUtility.java, line(s) 137
com/vungle/warren/utility/VungleUrlUtility.java, line(s) 14
com/vungle/warren/utility/platform/AndroidPlatform.java, line(s) 62,75,99,101,105,88
com/wxiwei/office/constant/fc/ErrorConstant.java, line(s) 42
com/wxiwei/office/fc/POIDocument.java, line(s) 162
com/wxiwei/office/fc/doc/DOCXReader.java, line(s) 176,1589,2269,2284,2285,2295,2299,2303,2307,2384,2413
com/wxiwei/office/fc/dom4j/DocumentException.java, line(s) 43
com/wxiwei/office/fc/dom4j/DocumentFactory.java, line(s) 38
com/wxiwei/office/fc/dom4j/rule/RuleManager.java, line(s) 75
com/wxiwei/office/fc/dom4j/tree/NamespaceStack.java, line(s) 212
com/wxiwei/office/fc/hpsf/HPSFPropertiesExtractor.java, line(s) 75
com/wxiwei/office/fc/hpsf/PropertyIDMap.java, line(s) 109,110
com/wxiwei/office/fc/hpsf/VariantSupport.java, line(s) 310
com/wxiwei/office/fc/hslf/record/CurrentUserAtom.java, line(s) 49,79
com/wxiwei/office/fc/hslf/record/Record.java, line(s) 36,63
com/wxiwei/office/fc/hssf/eventusermodel/FormatTrackingHSSFListener.java, line(s) 57,69
com/wxiwei/office/fc/hssf/formula/WorkbookEvaluator.java, line(s) 305
com/wxiwei/office/fc/hssf/record/EmbeddedObjectRefSubRecord.java, line(s) 79
com/wxiwei/office/fc/hssf/record/FeatRecord.java, line(s) 59
com/wxiwei/office/fc/hssf/record/SSTDeserializer.java, line(s) 22
com/wxiwei/office/fc/hssf/record/common/UnicodeString.java, line(s) 87
com/wxiwei/office/fc/hssf/usermodel/HSSFSheet.java, line(s) 275
com/wxiwei/office/fc/hssf/usermodel/HSSFWorkbook.java, line(s) 385
com/wxiwei/office/fc/poifs/eventfilesystem/POIFSReader.java, line(s) 48,38,40,54
com/wxiwei/office/fc/poifs/filesystem/NPOIFSFileSystem.java, line(s) 184
com/wxiwei/office/fc/poifs/filesystem/POIFSFileSystem.java, line(s) 101
com/wxiwei/office/fc/util/DrawingDump.java, line(s) 11,14
com/wxiwei/office/fc/util/HexDump.java, line(s) 170
com/wxiwei/office/fc/util/IntUtils.java, line(s) 20,24,28
com/wxiwei/office/fc/util/SystemOutLogger.java, line(s) 30
com/wxiwei/office/officereader/AppActivity.java, line(s) 118,122,123,154,155,329,418,647,742
com/wxiwei/office/simpletext/model/AttrManage.java, line(s) 63,64,65,66,67,68,69,70,71,72
com/wxiwei/office/system/ErrorUtil.java, line(s) 93
com/wxiwei/office/system/SocketClient.java, line(s) 30,39,41
com/wxiwei/office/system/beans/pagelist/APageListView.java, line(s) 116,122
com/wxiwei/office/thirdpart/emf/font/TTFCMapTable.java, line(s) 32,35,143
com/wxiwei/office/thirdpart/emf/font/TTFFile.java, line(s) 52,53,59,60,61
com/wxiwei/office/thirdpart/emf/font/TTFFont.java, line(s) 24,54,57
com/wxiwei/office/thirdpart/emf/font/TTFGlyfTable.java, line(s) 62,70
com/wxiwei/office/thirdpart/emf/font/TTFHeadTable.java, line(s) 76
com/wxiwei/office/thirdpart/emf/font/TTFInput.java, line(s) 16,26
com/wxiwei/office/thirdpart/emf/font/TTFNameTable.java, line(s) 41
com/wxiwei/office/thirdpart/emf/font/TTFPostTable.java, line(s) 37
com/wxiwei/office/thirdpart/emf/font/TTFTable.java, line(s) 30,34
com/wxiwei/office/thirdpart/emf/io/ASCII85InputStream.java, line(s) 23
com/wxiwei/office/thirdpart/emf/io/ByteCountInputStream.java, line(s) 32,42,47
com/wxiwei/office/thirdpart/emf/io/TagSet.java, line(s) 11
com/wxiwei/office/wp/control/WPControl.java, line(s) 391
com/wxiwei/office/wp/control/Word.java, line(s) 112,565,571,575,726
com/wxiwei/office/wp/view/LayoutKit.java, line(s) 32,39,168,251,338
com/wxiwei/office/wp/view/LayoutThread.java, line(s) 17,27
com/wxiwei/office/wp/view/NormalRoot.java, line(s) 199
com/wxiwei/office/wp/view/PageRoot.java, line(s) 37,51,91
com/wxiwei/office/wp/view/WPLayouter.java, line(s) 116,122,176,239,279,283
dagger/android/AndroidInjection.java, line(s) 51,50
junit/runner/BaseTestRunner.java, line(s) 247
junit/runner/Version.java, line(s) 12
junit/textui/TestRunner.java, line(s) 36,83,114
org/greenrobot/eventbus/Logger.java, line(s) 78,83
org/greenrobot/eventbus/util/ErrorDialogConfig.java, line(s) 43
org/greenrobot/eventbus/util/ErrorDialogManager.java, line(s) 163
org/greenrobot/eventbus/util/ExceptionToResourceMapping.java, line(s) 30

信息此应用程序将数据复制到剪贴板。敏感数据不应复制到剪贴板，因为其他应用程序可以访问它

CODE

此应用程序将数据复制到剪贴板。敏感数据不应复制到剪贴板，因为其他应用程序可以访问它
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x04b-Mobile-App-Security-Testing.md#clipboard

Files:
com/trustedapp/pdfreader/utils/CommonUtils.java, line(s) 6,141

安全此应用程序使用SSL Pinning 来检测或防止安全通信通道中的MITM攻击

CODE

此应用程序使用SSL Pinning 来检测或防止安全通信通道中的MITM攻击
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05g-Testing-Network-Communication.md#testing-custom-certificate-stores-and-certificate-pinning-mstg-network-4

Files:
com/mbridge/msdk/thrid/okhttp/internal/Util.java, line(s) 445,444,443,443

安全此应用程序可能具有Root检测功能

CODE

此应用程序可能具有Root检测功能
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05j-Testing-Resiliency-Against-Reverse-Engineering.md#testing-root-detection-mstg-resilience-1

Files:
com/apm/insight/nativecrash/c.java, line(s) 464,464,464,464,464

安全分析报告： DocxReader v1.2.29

安全分数

安全分数 44/100

风险评级

等级

严重性分布 (%)

隐私风险

用户/设备跟踪器

调研结果

高危域配置不安全地配置为允许明文流量到达范围内的这些域。

高危如果一个应用程序使用WebView.loadDataWithBaseURL方法来加载一个网页到WebView，那么这个应用程序可能会遭受跨站脚本攻击

高危应用程序在加密算法中使用ECB模式。ECB模式是已知的弱模式，因为它对相同的明文块[UNK]产生相同的密文

高危应用程序使用带PKCS5/PKCS7填充的加密模式CBC。此配置容易受到填充oracle攻击。

高危该文件是World Writable。任何应用程序都可以写入文件

高危应用程序包含隐私跟踪程序

中危应用程序已启用明文网络流量

中危 Service (com.trustedapp.pdfreader.service.MyFirebaseMessagingService) 未被保护。

中危 Broadcast Receiver (com.adjust.sdk.AdjustReferrerReceiver) 受权限保护, 但是应该检查权限的保护级别。

中危 Activity (com.facebook.CustomTabActivity) 未被保护。

中危 Broadcast Receiver (com.google.firebase.iid.FirebaseInstanceIdReceiver) 受权限保护, 但是应该检查权限的保护级别。

中危 Service (androidx.work.impl.background.systemjob.SystemJobService) 受权限保护, 但是应该检查权限的保护级别。

中危 Broadcast Receiver (androidx.work.impl.diagnostics.DiagnosticsReceiver) 受权限保护, 但是应该检查权限的保护级别。

中危文件可能包含硬编码的敏感信息，如用户名、密码、密钥等

中危应用程序可以读取/写入外部存储器，任何应用程序都可以读取写入外部存储器的数据

中危应用程序使用SQLite数据库并执行原始SQL查询。原始SQL查询中不受信任的用户输入可能会导致SQL注入。敏感信息也应加密并写入数据库

中危应用程序使用不安全的随机数生成器

中危 MD5是已知存在哈希冲突的弱哈希

中危 SHA-1是已知存在哈希冲突的弱哈希

中危 IP地址泄露

中危应用程序创建临时文件。敏感信息永远不应该被写进临时文件

中危不安全的Web视图实现。可能存在WebView任意代码执行漏洞

中危可能存在跨域漏洞。在 WebView 中启用从 URL 访问文件可能会泄漏文件系统中的敏感信息

中危 Firebase远程配置已启用

中危此应用可能包含硬编码机密信息

信息应用程序记录日志信息,不得记录敏感信息

信息此应用程序将数据复制到剪贴板。敏感数据不应复制到剪贴板，因为其他应用程序可以访问它

安全此应用程序使用SSL Pinning 来检测或防止安全通信通道中的MITM攻击

安全此应用程序可能具有Root检测功能

安全评分: ( DocxReader 1.2.29)

安全分析报告： DocxReader v1.2.29

安全分数

安全分数 44/100

风险评级

等级

严重性分布 (%)

隐私风险

用户/设备跟踪器

调研结果

高危 域配置不安全地配置为允许明文流量到达范围内的这些域。

高危 如果一个应用程序使用WebView.loadDataWithBaseURL方法来加载一个网页到WebView，那么这个应用程序可能会遭受跨站脚本攻击

高危 应用程序在加密算法中使用ECB模式。ECB模式是已知的弱模式，因为它对相同的明文块[UNK]产生相同的密文

高危 应用程序使用带PKCS5/PKCS7填充的加密模式CBC。此配置容易受到填充oracle攻击。

高危 该文件是World Writable。任何应用程序都可以写入文件

高危 应用程序包含隐私跟踪程序

中危 应用程序已启用明文网络流量

中危 Service (com.trustedapp.pdfreader.service.MyFirebaseMessagingService) 未被保护。

中危 Broadcast Receiver (com.adjust.sdk.AdjustReferrerReceiver) 受权限保护, 但是应该检查权限的保护级别。

中危 Activity (com.facebook.CustomTabActivity) 未被保护。

中危 Broadcast Receiver (com.google.firebase.iid.FirebaseInstanceIdReceiver) 受权限保护, 但是应该检查权限的保护级别。

中危 Service (androidx.work.impl.background.systemjob.SystemJobService) 受权限保护, 但是应该检查权限的保护级别。

中危 Broadcast Receiver (androidx.work.impl.diagnostics.DiagnosticsReceiver) 受权限保护, 但是应该检查权限的保护级别。

中危 文件可能包含硬编码的敏感信息，如用户名、密码、密钥等

中危 应用程序可以读取/写入外部存储器，任何应用程序都可以读取写入外部存储器的数据

中危 应用程序使用SQLite数据库并执行原始SQL查询。原始SQL查询中不受信任的用户输入可能会导致SQL注入。敏感信息也应加密并写入数据库

中危 应用程序使用不安全的随机数生成器

中危 MD5是已知存在哈希冲突的弱哈希

中危 SHA-1是已知存在哈希冲突的弱哈希

中危 IP地址泄露

中危 应用程序创建临时文件。敏感信息永远不应该被写进临时文件

中危 不安全的Web视图实现。可能存在WebView任意代码执行漏洞

中危 可能存在跨域漏洞。在 WebView 中启用从 URL 访问文件可能会泄漏文件系统中的敏感信息

中危 Firebase远程配置已启用

中危 此应用可能包含硬编码机密信息

信息 应用程序记录日志信息,不得记录敏感信息

信息 此应用程序将数据复制到剪贴板。敏感数据不应复制到剪贴板，因为其他应用程序可以访问它

安全 此应用程序使用SSL Pinning 来检测或防止安全通信通道中的MITM攻击

安全 此应用程序可能具有Root检测功能

安全评分: ( DocxReader 1.2.29)

高危域配置不安全地配置为允许明文流量到达范围内的这些域。

高危如果一个应用程序使用WebView.loadDataWithBaseURL方法来加载一个网页到WebView，那么这个应用程序可能会遭受跨站脚本攻击

高危应用程序在加密算法中使用ECB模式。ECB模式是已知的弱模式，因为它对相同的明文块[UNK]产生相同的密文

高危应用程序使用带PKCS5/PKCS7填充的加密模式CBC。此配置容易受到填充oracle攻击。

高危该文件是World Writable。任何应用程序都可以写入文件

高危应用程序包含隐私跟踪程序

中危应用程序已启用明文网络流量

中危文件可能包含硬编码的敏感信息，如用户名、密码、密钥等

中危应用程序可以读取/写入外部存储器，任何应用程序都可以读取写入外部存储器的数据

中危应用程序使用SQLite数据库并执行原始SQL查询。原始SQL查询中不受信任的用户输入可能会导致SQL注入。敏感信息也应加密并写入数据库

中危应用程序使用不安全的随机数生成器

中危应用程序创建临时文件。敏感信息永远不应该被写进临时文件

中危不安全的Web视图实现。可能存在WebView任意代码执行漏洞

中危可能存在跨域漏洞。在 WebView 中启用从 URL 访问文件可能会泄漏文件系统中的敏感信息

中危此应用可能包含硬编码机密信息

信息应用程序记录日志信息,不得记录敏感信息

信息此应用程序将数据复制到剪贴板。敏感数据不应复制到剪贴板，因为其他应用程序可以访问它

安全此应用程序使用SSL Pinning 来检测或防止安全通信通道中的MITM攻击

安全此应用程序可能具有Root检测功能