freshplanet / ANE-Facebook

Air Native Extension (iOS and Android) for the Facebook mobile SDK
Apache License 2.0
221 stars 123 forks source link

Google Play security alert #236

Closed flashysquirrel closed 7 years ago

flashysquirrel commented 8 years ago

On 17/02/2016, google play gave me a security alert for : WebViewClient.onReceivedSslError, saying that SSL validations are ignored.

After some search on google, i found out that overriding onReceivedSslError, and putting handler.proceed(); inside doesn't make google happy.

I also saw that this instruction is filtered by a constant which remains false, so it is not executed, so i wonder how google performs his security check, if it's only by regex in source code, the presence of this instruction may be the problem.