Android安全编码指南.docx

/confluence/pages/viewpage.action?pageId=11150953550. Android (DRD)Skip to end of metadataCreated by?Robert Seacord, last modified by?David Svoboda?on?Oct 20, 2014Go to start of metadataThe following rules and guidelines are?specific only to the Android platform. These?do not apply to the development of Java or C programs for?non-Android platforms.?(The full set of Android -relevant rules and guidelines?are?here.)?The term?sensitive?incorporates the Java glossary definition ofsensitive data, as well as the Android concept of permission-protected.DRD00-J. Do not store sensitive information on external storage (SD card) unless encrypted firstDRD01-J. Limit the accessibility of an apps sensitive content providerDRD02-J. Do not allow WebView to access sensitive local resource through file schemeDRD03-J. Do not broadcast sensitive information using an implicit intentDRD04-J. Do not log sensitive informationDRD05-J. Do not grant URI permissions on implicit intentsDRD06-J. Do not act on malicious intentsDRD07-J. Protect exported services with strong permissionsDRD08-J. Always canonicalize a URL received by a content providerDRD09-J. Restrict access to sensitive activitiesDRD10-J. Do not release apps that are debuggableDRD11-J. Ensure that sensitive data is kept secureDRD12-J. Do not trust data that is world writableDRD13-J. Do not provide addJavascriptInterface method access in a WebView which could contain untrusted content. (API level JELLY_BEAN or below)DRD14-J. Check that a calling app has appropriate permissions before respondingDRD15-J. Consider privacy concerns when using Geolocation APIDRD16-J. Explicitly define the exported attribute for private componentsDRD17-J. Do not use the Android cryptographic security provider encryption default for AESDRD18-J. Do not use the default behavior in a cryptographic library if it does not use recommended practicesDRD19-J. Properly verify server certificate on SSL/TLSDRD20-J. Specify permissions when creating files via the NDKDR