前言
最近上架Google 有提示这种警告
vbnet
"reCAPTCHA Enterprise (com.googleandroidrecaptcha:recaptcha)"的开发者向 SDK 版本 18.1.2 添加了以下备注:
A critical security vulnerability was discovered in reCAPTCHA Enterprise for Mobile. The vulnerability has been patched in the latest SDK
release. Customers wil need to update their Android apolication with the reCAPTCHA Enterorise for Mobile SDk, version 18 4 0 or above.We
strongly recommend you update to the latest version as soon as possible
因为我们项目依赖了Firebase的一些三方sdk
java
implementation 'com.adjust.sdk:adjust-android:4.28.3'
//gcm
implementation "com.google.android.gms:play-services-gcm:17.0.0"
//内购
api 'com.android.billingclient:billing:6.0.0'
implementation 'com.google.android.play:core:1.10.0'
// Import the Firebase BoM
implementation 'com.google.firebase:firebase-core:20.1.2'
implementation platform('com.google.firebase:firebase-bom:32.3.0')
implementation 'com.google.firebase:firebase-config'
implementation 'com.google.firebase:firebase-analytics'
implementation 'com.google.firebase:firebase-messaging'
implementation 'com.google.firebase:firebase-auth'
implementation 'com.google.firebase:firebase-crashlytics:18.1.0'
// play install
implementation 'com.android.installreferrer:installreferrer:2.2'加了这些依赖后 我们去打包没问题 但是我们提包去商店 就报问题了
stackoverflow.com/questions/7...
我们可以在 GitHub 的 Firebase-android-sdk 里面的 issues 里面可以看到
需要更新到 18.4.0 版本
css
Add the following build rule to the dependencies section of your app-level build.gradle file:
implementation 'com.google.android.recaptcha:recaptcha:18.4.0'
Make sure to use reCAPTCHA SDK version 18.4.0 or later.更新此版本应该就可以解决 因为Firebase 的其他依赖里面 包含了 (com.google.android.recaptcha;recaptcha)这个依赖
最后总结 ：
此类上架问题我们需要针对Firebase sdk 仓库的 isseus 去排查