What is the best practice to deal with Google Play Store Security Alert? -
i have received following error google play developer console: "please address vulnerability possible , increment version number of upgraded apk. handle ssl certificate validation, change code invoke sslerrorhandler.proceed() whenever certificate presented server meets expectations, , invoke sslerrorhandler.cancel() otherwise."
i guess issue caused implementation of "onreceicedsslerror()". proceed "handler.proceed()" without checking.
i know best practice deal ssl error. , if domain checking, google play still show me such alert?
thanks in advance.
you should remove onreceivedsslerror
implementation , use default behavior, cancel.
the best practice treat couldn't connect server. people have no reason override certificate checking @ all.
Comments
Post a Comment