鉴权风险 #41

Open

opened

on Mar 17, 2020

鉴权的参数都是APP自己传的，包括密钥和uid，如果第三方APP被逆向了，密钥和uid被伪造，岂不是有风险？binder在Framework层获取uid相对风险可控，server端可以根据uid和包名做校验

Metadata

Assignees

No one assigned

Labels

No labels

No labels

Type

No type

Fields

No fields configured for issues without a type.

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests