What is the best practice to deal with Google Play Store Security Alert? -


i have received following error google play developer console: "please address vulnerability possible , increment version number of upgraded apk. handle ssl certificate validation, change code invoke sslerrorhandler.proceed() whenever certificate presented server meets expectations, , invoke sslerrorhandler.cancel() otherwise."

i guess issue caused implementation of "onreceicedsslerror()". proceed "handler.proceed()" without checking.

i know best practice deal ssl error. , if domain checking, google play still show me such alert?

thanks in advance.

you should remove onreceivedsslerror implementation , use default behavior, cancel.

the best practice treat couldn't connect server. people have no reason override certificate checking @ all.


Comments

Popular posts from this blog

html - Outlook 2010 Anchor (url/address/link) -

javascript - Why does running this loop 9 times take 100x longer than running it 8 times? -

Getting gateway time-out Rails app with Nginx + Puma running on Digital Ocean -