رسائل راس السنة و العام الجديد - Dynamic Code Loading, External URLs, SD-card access vulnerabilities

Name

Vendor

Link

Store

Version

• MEDIUM
WebView JavaScript enabled

WebView 'setJavaScriptEnabled(true)' could be exploited during cross-site scripting attacks.

Dynamic Code Loading

Code for 'DexClassLoader' could be tampered.

WebView files access

Control of WebView context allows to access local files.

SD-card access

SD-cards and other external storages have 'worldwide read' policy.

• NOTICE
External URLs

Were do they point?

Suspicious files

Are you sure these files should be here?

Unsafe deleting

All items deleted with 'file.delete()' could be recovered.

References