Questions tagged [android-security]

Tag used by Android in Security Alert messages to developers. The Security Alert message is often accompanied with a Google-Play rejection. AOSP instructions state to tag a question with it.

Tag used by Android in Security Alert messages to developers. The Security Alert message is often accompanied with a Google-Play rejection. AOSP instructions state to tag a question with it.

656 questions
0
votes
0 answers

Unable to upload cordova apk in app store due to security vulnerabilities

I have uploaded an app 2 years ago having apache version less than 3.5.0 I unpublished this app and created a new app with same account and uploaded apk in alpha from latest cordova version (7.0.1) and all latest plugins, but still I am getting the…
0
votes
1 answer

Security threat by a BroadcastReceiver with GooglePlay's permissions

Does the following situation create a security threat? Image a situation. You have a device without GooglePlay services installed. You create a broadcast receiver with android:permission="com.google.android.c2dm.permission.SEND" permission (this…
0
votes
1 answer

Unable to display Toast message when phone is PIN locked

public class MainActivity extends AppCompatActivity { @Override protected void onCreate(Bundle savedInstanceState) { super.onCreate(savedInstanceState); getWindow().addFlags(WindowManager.LayoutParams.FLAG_KEEP_SCREEN_ON …
0
votes
0 answers

Storing REST api secure key on client side Android

Is it best practice to put "secure key" as part of the android code and generate apk for distribution. I make some rest calls inside my app, where "secret key" to call external services are passed as part of the HTTP headers.Is that a good…
sudharsan tk
  • 494
  • 6
  • 14
0
votes
1 answer

How can i secure my application and also protect my Sqlite database in application

How can i secure my application and also protect my database in application. Which means data is not accessed by other application or by reverse engineering. Like in banking application login data and other information is stored in app but we can…
0
votes
0 answers

Android unsafe implementation of the HostnameVerifier interface?

I have publish my application on Google play developer console but application is suspended. I am getting following error and I haven't used HostnameVerifier interface in my code. I have just called Payment gateway of Paytm in Webview which used in…
0
votes
1 answer

launch android app in context of my application

I want to launch an app in context of my application (for sandboxing purposes). I read that for application launching, android uses bindApplication and performLaunch methods that are hidden from programmers. After that, I implemented these methods…
0
votes
1 answer

Most secure way of sending data between activities in Android

I looked up different Q&A on how to send data or what are the best way to send data between activities in Android but I could not find an answer on what is the most secure way to do it, if data are sensitive. Best ways to send data between…
Red M
  • 2,609
  • 3
  • 30
  • 50
0
votes
1 answer

Android Studio : How to let other apps use my app's downloaded data for some time period, like streaming, but also keep it secure?

I am building an app that downloads some attachments, like mp4, mp3, docx, pdf, etc, from the server and saves them in the directory returned by getApplicationContext().getDir(), which makes it secure from using it outside this app. But, I need the…
0
votes
2 answers

Libpng vulnerability issue

Hi I'm using the following dependencies in my project Gradle and I have update all the packages so far but every time after uploading google play console rejecting my app saying Libpng vulnerability issue. compile fileTree(dir: 'libs', include:…
sridhar s
  • 1
  • 6
0
votes
1 answer

Android is passing values with explicit intent safe

Is it secure to pass String between activities via Bundle given that device is not rooted and considered secure? Can other processes like hacker's malware gain access to the data somehow?
Heisenberg
  • 3,153
  • 3
  • 27
  • 55
0
votes
2 answers

Android App - Avast Security detects as malicious

I have an Android app that I have written and when my friend installs it on his phone (which has Avast Mobile Security) it prompts that the app may be malicious and asks if we want to Remove or Ignore. The exact message is... "MY APP NAME" could be…
Phil
  • 4,029
  • 9
  • 62
  • 107
0
votes
1 answer

No requests are being made from Google Play Store deployed app

I have made an app in Ionic and published it in closed beta in Google Play Store. Https requests work very well when testing it with "ionic serve" or "ionic run android" but no request is being done if I install the app from Google Play Store. What…
2dor
  • 851
  • 3
  • 15
  • 35
0
votes
1 answer

How to successfully upload my app to the play store without WebViewClient.onReceivedSslError

Recently I updated my app and tried to upload the Google Play Store again. But my app rejected several times due to this warning Your application uses an old version ( not secure one ) of Lib WebViewClient.onReceivedSslError . Check this…
0
votes
3 answers

How to keep passwords securely in android using shared preferences or sqlite database?

I am building an app which generates a random password and you can keep it along with your other details such as username, website url, name etc. Basically a password management thing. Things to be stored: When I am clicking on the save button, I…