android-security - 您的应用包含意图重定向漏洞

Question

我最近向 Google Play 商店推出了一款游戏，直到现在它都运行良好。我刚刚收到一封来自 Google 的电子邮件，内容是“您的一个或多个应用程序包含一个意图重定向漏洞，该漏洞使用户数据处于危险之中”，并告诉我我需要在 8 月 13 日之前修复它。
我个人不收集或要求任何用户数据或信息。但是，我在游戏中使用了带有 Facebook 中介和 Unity 广告的 Google Admob 广告，这可能是导致此问题的原因。所以，我的问题是如何克服这个问题？他们还在电子邮件中说要对 list 文件进行更改。如果有人遇到类似的问题并知道解决方案，我们将不胜感激。
这是电子邮件:

"One or more of your apps contains an Intent Redirection vulnerability that puts user data at risk. On August 13, 2019, any apps that contain unfixed security vulnerabilities beyond the dates listed on your Play Console alerts will be removed from Google Play.

Action required

Sign in to your Play Console.Select Alerts to see which apps contain a security vulnerability, and review the guidance on how to resolve the vulnerability.Update your affected apps to fix the vulnerabilities.Submit the updated versions of your affected apps.Upon resubmission, your app will be reviewed again. This process can take several hours. If the app passes review and is published successfully then no further action is required. If the app fails review then the new app version will not be published and you will receive notification via email."

Answer 1

我有同样的问题，实际上最新的 Unity 默认添加小米 SDK 会导致此问题。


简单地从你的 Unity 中删除小米它会解决这个问题。