[AC-6641] app enables debugging of web layouts and JavaScript code running inside WebViews
| GitHub Issue | n/a |
|---|---|
| Type | Bug |
| Priority | n/a |
| Status | Open |
| Resolution | Unresolved |
| Affected Version/s | Appcelerator Studio 4.5.0 |
| Fix Version/s | n/a |
| Components | Titanium SDK & CLI |
| Labels | n/a |
| Reporter | shishir.roy |
| Assignee | Abir Mukherjee |
| Created | 2020-12-04T10:33:48.000+0000 |
| Updated | 2020-12-04T18:38:38.000+0000 |
Description
We have run security checks tools (ZIMPERIUM) for our android app which builds on titanium SDK.
Check the below output:
This app enables debugging of web layouts and JavaScript code running inside
WebViews
This app enables debugging of web layouts and JavaScript code running inside WebViews.
Details:
ti.modules.titanium.ui.widget.webview.TiUIWebView
Is it possible this is enabled in release mode as well?
Titanium only enables remote WebView debugging when doing a "debug" build of your app. https://github.com/appcelerator/titanium_mobile/blob/master/android/modules/ui/src/java/ti/modules/titanium/ui/widget/webview/TiUIWebView.java#L283-L286 It is not enabled for release/production builds.