fly803 / baseproject Goto Github PK

Hi, we are a research group to help developers build secure applications. We designed a cryptographic misuse detector on Java language(Our main concern is the secure implementation and use of Json Web Token). We found your great public repository (i.e.,BaseProject) from Github, and several security issues detected by our detector are shown in the following. The specific security issues we found are as follows:
(1) Location: Package: org.apache.commons.codec.binary.Base64; Class: generalKey.class
Security issue: Using predictable/constant seed to generate cryptographic key when creating and verifing Json Web Token.

Using a hard-coded seed to generate key [(new SecretKeySpec(encodedKey, 0, encodedKey.length, "AES");] does not conform to the security implementation specification of JWT, which may bring security risks to your system. It is recommended that you use a more secure way to generate the key used to generate the JWT. （For the hazards of hardcoded keys, you can refer to CWE-321, NIST Special Publication 800-57).

We wish the above security issues cloud truly help you to build a secure application. If you have any concern or suggestion, please feel free to contact us, we are looking forwart to your reply. Thanks.

androidx的工程不能用啊

ui效果图 就是按照1280*800 做的 ,,那我这个平板适配要怎么生成?

报错内容
Manifest merger failed : Apps targeting Android 12 and higher are required to specify an explicit value for android:exported when the corresponding component has an intent filter defined
报错原因：
如果 AndroidManifest.xml 注册的 activity、activity-alias、service 或者 broadcast receiver 组件有 intent-filter 属性，必须显式设置 android:exported 的值，否则应用将无法安装。
解决方法：
第一处，代码中改为

            <category android:name="android.intent.category.LAUNCHER"/>
        </intent-filter>

08-10 16:43:53.045 2814-2814/com.ivy.baseproject.test E/AndroidRuntime: FATAL EXCEPTION: main
Process: com.ivy.baseproject.test, PID: 2814
java.lang.RuntimeException: Unable to start activity ComponentInfo{com.ivy.baseproject.test/me.weyye.hipermission.PermissionActivity}: java.lang.IllegalStateException: You need to use a Theme.AppCompat theme (or descendant) with this activity.
at android.app.ActivityThread.performLaunchActivity(ActivityThread.java:2724)
at android.app.ActivityThread.handleLaunchActivity(ActivityThread.java:2785)
at android.app.ActivityThread.-wrap12(ActivityThread.java)
at android.app.ActivityThread$H.handleMessage(ActivityThread.java:1532)
at android.os.Handler.dispatchMessage(Handler.java:102)
at android.os.Looper.loop(Looper.java:163)
at android.app.ActivityThread.main(ActivityThread.java:6337)
at java.lang.reflect.Method.invoke(Native Method)
at com.android.internal.os.ZygoteInit$MethodAndArgsCaller.run(ZygoteInit.java:880)
at com.android.internal.os.ZygoteInit.main(ZygoteInit.java:770)
Caused by: java.lang.IllegalStateException: You need to use a Theme.AppCompat theme (or descendant) with this activity.

屏幕分辨率生成的dimens文件 都是一样的，这样确定是可以的？

报错内容
Manifest merger failed : Apps targeting Android 12 and higher are required to specify an explicit value for android:exported when the corresponding component has an intent filter defined
报错原因：
如果 AndroidManifest.xml 注册的 activity、activity-alias、service 或者 broadcast receiver 组件有 intent-filter 属性，必须显式设置 android:exported 的值，否则应用将无法安装。
解决方法：
第一处，代码中改为

            <category android:name="android.intent.category.LAUNCHER"/>
        </intent-filter>

1、网络请求接口已经废弃
2、分配率测试界面测试按钮点击crash
3、继承basefragment按钮点击crash
4、ui小控件按钮点击crash
5、运行时权限喝文件图像操作暂时无功能可测

大神 能不能把支付宝微信登陆支付 集成进去，以后使用只要更改配置就好了，我觉得这样的需求应该挺多的

引入功能重复的包是意义是啥？