[Security] Static Scan Issues faced on MobSF platform

emilsjolander / StickyListHeaders

An android library for section headers that stick to the top

Apache License 2.0

5.51k stars 1.52k forks source link

Open KumariAnjuThakur opened 5 years ago

KumariAnjuThakur commented 5 years ago

Hi we are facing following issues in mobSF static scan in this library :

The App logs information. Sensitive information should never be logged.
The App uses Java Hash Code. It's a weak hash function and should never be used in Secure Crypto

Could you guys, please help us to resolve these issues?