Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Lint warnings #8

Open
rihanfarman opened this issue Dec 30, 2015 · 1 comment
Open

Lint warnings #8

rihanfarman opened this issue Dec 30, 2015 · 1 comment
Assignees

Comments

@rihanfarman
Copy link

After using 3DSView, I am getting the following Lint warnings.

  • AddJavascriptInterface: addJavascriptInterface Called - WebView.addJavascriptInterface should not be called with minSdkVersion < 17 for security reasons: JavaScript can use reflection to manipulate application
  • SetJavaScriptEnabled: Using setJavaScriptEnabled - Using setJavaScriptEnabled can introduce XSS vulnerabilities into you application, review carefully.
  • WrongConstant: Incorrect constant - Must be one or more of: Pattern.UNIX_LINES, Pattern.CASE_INSENSITIVE, Pattern.COMMENTS, Pattern.MULTILINE, Pattern.LITERAL, Pattern.DOTALL, Pattern.UNICODE_CASE, Pattern.CANON_EQ

Are there any fixes for these warnings?

@livotov
Copy link
Member

livotov commented Dec 30, 2015

Hi, thanks !
Will check the contstants.

Regarding the numbers 1 & 2 - not sure they can be fixed because we need both to do some tricky things in order to manipulate web page and intercept post and extract data from it. Also Im not sure there are any security issues here as 3DSView component only visits the trusted acs server page, which url is provided by the payment system.

@livotov livotov self-assigned this Mar 4, 2016
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants