android - Google Play 结算库的变更日志在哪里？

Question

我看到 android SDK 中有一个更新版本。 5，但我很好奇发生了什么变化。Bug修复？功能增强？

我似乎无法在任何地方找到变更日志，感谢您的帮助。谢谢!

Answer 1

我刚刚看到有人收到了来自 Google 的这封电子邮件。

Hello, If you previously used the In-app billing sample code to build your in-app billing system, please use the recently-updated sample code as it addresses an exploitable flaw we recently discovered (note that this only affects the helper sample code; the core system and in-app billing service itself was not affected).

The affected applications are those that use the in-app billing sample library (specifically, the IabHelper and the Security classes in the util directory of the in-app billing V3 sample) and do not perform server-side verification.

An update to the sample and library that fixes this vulnerability is now available at code.google.com/p/marketbilling and also through the Android SDK Manager.

To apply the security update: 1. Download the updated source code for the in-app billing sample and library from the Android SDK Manager, which is part of the Android SDK. The in-app billing package is located under Extras -> Google Play Billing Library. Make sure to update to Revision 5. (or, alternatively, download the updated source code from the public repository at code.google.com/p/marketbilling).

1. Merge the new code for IabHelper.java and Security.java into your application, replacing the existing code.

If you prefer to apply the code changes manually, you can browse the diff at

https://code.google.com/p/marketbilling/source/detail?r=7bc191a004483a1034b758e1df0bda062088d840

and merge the modifications into the appropriate parts of your code.

Thank you for your continued support of Google Play.

Regards,

The Google Play Team

©2013 Google Inc. 1600 Amphitheatre Parkway Mountain View, CA 94043

这似乎是一个我从未听说过的重要安全更新，如果我对更新日志感到好奇的话。
不过，我只是发现了这个，没有真正有趣的变更日志!

编辑:
好的，从存储库中的更改日志来看，他们显然只是“修复了几个错误”。 marketbilling_changelog .
电子邮件中解释的那些!