How to fix below error in Google Play store(React native)
Your app is using an unsafe implementation of hostname verifier. Please see this Google Help Centre article for details, including the deadline for fixing the vulnerability.
Lh/a/a/a/a/l/e$a;
Lh/a/a/a/a/l/f$a;
Your project or any libraries may use an unsafe hostname verifier. You may successfully updated this app using the same code without any error on previous time. But it is a new review strategy from google play.
If you are not sure which package is used this unsafe-hostname, you can contact google play support team using the link: https://support.google.com/googleplay/android-developer/contact/app_vuln
Don't forget to select the same Google account to which you have uploaded your project
You will receive an email within 2 or 3 business days with details of this issue, including the name of the library that used the unsafe-hostname.
You can upgrade this library to the latest version, or you can remove this if you are actually not implementing this library in your code.
I got the following detailed email from google when I contacted with the above link.
*
For example, your app is currently using the following vulnerable
implementation of HostnameVerifier:
Llib/android/paypal/com/magnessdk/network/d$1;
Llib/android/paypal/com/magnessdk/network/e$1;
My project was not using the PayPal library directly, but paypal is used by another library "braintreepayments". Actually, I am not using this library in my live project, I added this at the initial time of my project. So I commented this library in app/build.gradle, this fixed my issue.
Related
I am working on a custom Android library. I have created a working library module for testing and now I want to publish it so that I can use it in upcoming projects.
I researched regarding this and found options such as JitPack, MavenCentral, JCentral, GitHub Packages and also one that I found interesting was creating a public GitHub repository of your AAR files and Maven metadata and implementing it using https://raw.githubusercontent.com/USER_NAME/REPO_NAME. I found this one interesting because as per my knowledge (from research) GitHub Packages requires access token with read package permissions.
What I tried was publishing my test library module to Nexus local and then accessing it. It's working fine but I want it to be live 24/7.
Now, what I want is to get more detail on publishing/uploading AAR files directly to public GitHub repository and also I found it interesting but my mind is keep saying me that this is a temporary solution so I also want a permanent solution.
My AGP is v7.2.2 and gradle is v7.3.3
I am trying to configure Firebase Crashlytics in my library project. According to Firebase its not possible to configure Crashlytics in the library project.
I am getting this error message.
Crashlytics was applied to an android-library project.
Android-library support is currently an incubating feature.
Help me if you have any solution or workaround.
I just wanted to log library project crashes in Firebase Crashlytics.
I recently worked on a library and from the get go, we knew that we won't be able to integrate an out of the box solution for this as it'll always conflict with consumer apps' implementation of the service like Firebase.
We opted for a different strategy. Handle all the crashes in the library ourselves and then heres what we do with them:
A listener set by the consumer app is notified of the error as a callback
Post the error logs to our own custom API server on next restart of the app and forward these logs onto different services like Firebase.
I understand this is not an exact solution that tells you how to use Firebase Crashlytics in a library but posting here as it gets the same work done.
In historical Fabric/Crashlytics for Android documentation and various online examples there is mention of the Fabric 'apiSecret' that should be included in your fabric.properties file. However, in the latest official documentation for setup with Gradle, there is no mention of it: https://fabric.io/kits/android/crashlytics/install. It also appears that the Gradle setup is no longer using fabric.properties and instead using the apiKey defined in the AndroidManifest.xml.
What is the recommended way to handle the 'apiSecret' and 'apiKey' in Android Gradle projects?
Currently Google is making the transition from fabric/crashlytics towards firebase/crashlytics. I'd recommend you look into this guide if you're currently implementing crashlytics
https://firebase.google.com/docs/crashlytics/
If going this route, you have to download a .json file from firebase after creating an app project there and include it in your app. No key needed.
I'm trying to use Twilio and I added the following dependency to gradle:
compile 'com.twilio.sdk:twilio:7.11.0'.
When I sync I get:
Warning:WARNING: Dependency org.apache.httpcomponents:httpclient:4.5.2 is ignored for ... as it may be conflicting with the internal version provided by Android.
I've seen a few questions about this, but none of them are working. I'm using OkHttp library for Http requests.
Any suggestions?
Thanks.
Twilio developer evangelist here.
We recommend that you do not use the REST API directly from your Android application, since it would mean that you would need to either embed or make available your Account SID and Auth Token. A malicious user could then intercept or decompile your application to gain access to your account. Thus, the Twilio Java library doesn't build for Android.
Instead, we recommend you make your calls to the Twilio API from a server you own and then set up the communication between your app and your server. Here is an example of how we recommend you send SMS messages with Android.
I have a old project that uses ActionBarSherlock library and old google play services project in workspace. Now, I need to add push notification to the project but, for this, I need compile com.google.firebase:firebase-messaging:9.4.0 then I have an exception "more than one library with package name 'com.google.android.gms'. The issue is I need keep old google play project module because this project used old version of google maps with reference to getMap() within SherlockMapFragment.
How to I compile firebase and old google play project?. From old google play project only need maps component, could I compile one service from google play project?
Thank you in advance!
Probably try this :
Remove old library of google play services, and keep the last 3 digits
Add firebase library
com.google.firebase:firebase-messaging:9.4.0
Add the needed part of the old library with the last 3 digits
com.google.android.gms:play-services-maps:X.Y.Z