[英]can Build Types resources be visible while reverse engineering the app?
I have two build variant in my Application, one is release and other is debug. 我的应用程序中有两个构建变体,一个是发布版本,另一个是调试版本。
In a release, I have set my https URL. 在一个版本中,我已经设置了https URL。 In Debug, I have set my local URL for testing purpose. 在调试中,我设置了本地URL以进行测试。
is it possible if I upload my release variant to PlayStore that somebody can reverse engineered it and see my Local testing URL? 如果我将发行版本上载到PlayStore,有人可以对其进行反向工程并查看我的本地测试URL,是否有可能? I dont want to expose my testing URL? 我不想公开我的测试网址?
If you just use flag to switch running environment and sorce code contain the local testing URL, it'll able to find in the disassembled smali files even if you obfuscated it 如果仅使用标志来切换运行环境,并且代码中包含本地测试URL,即使您对其进行了混淆,也可以在反汇编的smali文件中找到
You can try to split building const from resource using gradle, ref here: Change constant values when building a release edition 您可以尝试使用gradle从资源中拆分构建const,请参见此处: 构建发行版时更改常量值
声明:本站的技术帖子网页,遵循CC BY-SA 4.0协议,如果您需要转载,请注明本站网址或者原文地址。任何问题请咨询:yoyou2525@163.com.