search

Tornaco / Xposed-Application-Management-Mod

应用管理 Xposed
https://github.com/Tornaco/Xposed-Application-Management-Mod
Apache License 2.0
24 stars 4 forks source link

Do not export ComponentsReplacementProvider(fix play SQLInject secure… #342

Closed yinheng closed 6 years ago

yinheng commented 6 years ago

… bug)

Tornaco commented 6 years ago

您的应用存在 SQL 注入漏洞。请参阅这篇 Google 帮助中心文章了解详情。 存在安全漏洞的类： Lgithub/tornaco/xposedmoduletest/provider/ComponentsReplacementProvider;->delete Lgithub/tornaco/xposedmoduletest/provider/ComponentsReplacementProvider;->query Lgithub/tornaco/xposedmoduletest/provider/ComponentsReplacementProvider;->update 请在以下期限之前解决问题： 07/29/2018 会影响以下 APK 版本：5120 和 5070。

Tornaco commented 6 years ago

ContentProvider is deprecated in APM, instead we use IPC and custom preference storage.