我正在努力让我的Android应用符合Android的新政策,根据这个要求和说明,要有安全的应用程序。
1) 我首先在我的应用程序中添加了SSL和https到URL。 2) 然后我开始使用HttpsURLConnection类而不是HttpURLConnection。
这里是我使用的远程调用示例:
public void sendFeedback(String name , String email , String password )
{
String[] params = new String[] { "https://www.problemio.com/auth/create_profile_mobile.php", name , email , password };
DownloadWebPageTask task = new DownloadWebPageTask();
task.execute(params);
}
public class DownloadWebPageTask extends AsyncTask<String, Void, String>
{
private boolean connectionError = false;
@Override
protected void onPreExecute( )
{
dialog = new Dialog(CreateProfileActivity.this);
dialog.setContentView(R.layout.please_wait);
dialog.setTitle("Creating Profile");
TextView text = (TextView) dialog.findViewById(R.id.please_wait_text);
text.setText("Please wait while your profile is created... ");
dialog.show();
}
@Override
protected String doInBackground(String... theParams)
{
String myUrl = theParams[0];
final String name = theParams[1];
final String email = theParams[2];
final String password = theParams[3];
String charset = "UTF-8";
String response = null;
try
{
String query = String.format("name=%s&email=%s&password=%s",
URLEncoder.encode(name, charset),
URLEncoder.encode(email, charset),
URLEncoder.encode(password, charset));
final URL url = new URL( myUrl + "?" + query );
final HttpsURLConnection conn = (HttpsURLConnection) url.openConnection();
conn.setDoOutput(true);
conn.setRequestMethod("POST");
conn.setDoOutput(true);
conn.setUseCaches(false);
conn.connect();
final InputStream is = conn.getInputStream();
final byte[] buffer = new byte[8196];
int readCount;
final StringBuilder builder = new StringBuilder();
while ((readCount = is.read(buffer)) > -1)
{
builder.append(new String(buffer, 0, readCount));
}
response = builder.toString();
}
catch (Exception e)
{
connectionError = true;
}
return response;
}
@Override
protected void onPostExecute(String result)
{
// Some code
// Make an intent to go to the home screen
Intent myIntent = new Intent(CreateProfileActivity.this, MainActivity.class);
CreateProfileActivity.this.startActivity(myIntent);
}
}
}
但是它并没有消除我的开发者控制台上的警告标志。您知道我做错了什么,如何解决这个问题吗?
X509TrustManager
?你认为你需要它的场景是什么?https://commonsware.com/blog/2016/02/22/about-x509trustmanager-emails.html - CommonsWareX509TrustManager
,其实现存在问题,例如此问题中的问题。你可能有一个自己输入的,或者通过dependencies
添加的库中有一个,或者Google的扫描程序出了问题。 - CommonsWare