英文:
Google Play Issue found: Invalid Encryption Declaration on your Data safety form
问题
我最近在Google Play上上传了一个新的adb，并收到了以下消息：
问题发现：在您的数据安全表单上发现无效的加密声明
您在应用程序的数据安全表单中声明用户数据在传输中已加密，但我们检测到可能携带用户数据离开设备的未加密网络流量。
问题详情：
我们在以下区域发现了问题：
SPLIT_BUNDLE *******：策略声明 - 数据安全部分：http://insight.adsrvr.org
我已经尝试使用Android Studio工具 -> App Inspection -> Network Inspector 检查是否所有连接都在https中，并未找到任何从我的应用程序中发出的http连接。
我的应用程序始终在network-security-config上声明：
有没有办法让我更仔细地检查我的应用程序或任何第三方SDK是否存在未加密的网络流量？
英文:
I recent uploaded a new adb to Google Play and got the following message:
Issue found: Invalid Encryption Declaration on your Data safety form
You have declared that user data is encrypted in transit in your app’s Data safety form and we’ve detected unencrypted network traffic that may carry user data off device.
Issue details
We found an issue in the following area(s):
SPLIT_BUNDLE *******: Policy Declaration - Data Safety Section: "http://insight.adsrvr.org"
I have tried to check if all my connections are in https with Android Studio tool -> App Inspection -> Network Inspector . And could not find any http connection going out from my app.
My app always declared on network-security-config:
<domain-config cleartextTrafficPermitted="false">
<domain includeSubdomains="true">************</domain>
</domain-config>
<debug-overrides>
<trust-anchors>
<!-- Trust user added CAs while debuggable only -->
<certificates src="user" />
</trust-anchors>
</debug-overrides>
Is there any way for me to check any unencrypted network traffic from my app or any third party sdk more carefully?
答案1
得分: 1
我收到了相同的消息，经过浪费时间寻找侵权代码后，我意识到报告是关于应用的旧版本。不知何故，我们最新的发布版本仍包括一个专为旧设备设计的旧APK。为了解决问题，我不得不编辑发布，删除旧包，并重新提交审核。
英文:
I received the same message and after wasting time looking for the infringing code, I realized that the report was about an older version of the app. Somehow, our latest release still included an older APK intended for older devices. To resolve the problem, I had to edit the release, remove the older package, and resubmit for review.
通过集体智慧和协作来改善编程学习和解决问题的方式。致力于成为全球开发者共同参与的知识库，让每个人都能够通过互相帮助和分享经验来进步。
评论