موسوعة الوضوء و الصلاة - ContentProvider mode not defined, Dynamic Code Loading, External URLs vulnerabilities

Name

Vendor

Link

Store

Version

• MEDIUM
WebView JavaScript enabled

WebView 'setJavaScriptEnabled(true)' could be exploited during cross-site scripting attacks.

ContentProvider mode not defined

It should be defined either exported:'true' or exported:'false' according your needs.

WebView files access

Control of WebView context allows to access local files.

SQLite database found

Check VACUUM cleaning.

Dynamic Code Loading

Code for 'DexClassLoader' could be tampered.

• NOTICE
Unsafe deleting

All items deleted with 'file.delete()' could be recovered.

External URLs

Were do they point?

References