2***@qq.com
2***@qq.com
  • 发布:2025-07-25 15:36
  • 更新:2025-07-25 15:36
  • 阅读:136

uniapp打包apk后清单文件中出现androidx.profileinstaller.ProfileInstallReceiver,导致漏洞扫描不通过

分类:uni-app

hbuilder x版本:4.66
打包安卓的配置:

"android" : {  
                "packagename" : "省略",  
                "permissions" : [  
                    "<uses-feature android:name=\"android.hardware.camera\"/>",  
                    "<uses-feature android:name=\"android.hardware.camera.autofocus\"/>",  
                    "<uses-permission android:name=\"android.permission.ACCESS_COARSE_LOCATION\"/>",  
                    "<uses-permission android:name=\"android.permission.ACCESS_FINE_LOCATION\"/>",  
                    "<uses-permission android:name=\"android.permission.ACCESS_NETWORK_STATE\"/>",  
                    "<uses-permission android:name=\"android.permission.ACCESS_WIFI_STATE\"/>",  
                    "<uses-permission android:name=\"android.permission.CALL_PHONE\"/>",  
                    "<uses-permission android:name=\"android.permission.CAMERA\"/>",  
                    "<uses-permission android:name=\"android.permission.CHANGE_NETWORK_STATE\"/>",  
                    "<uses-permission android:name=\"android.permission.CHANGE_WIFI_STATE\"/>",  
                    "<uses-permission android:name=\"android.permission.FLASHLIGHT\"/>",  
                    "<uses-permission android:name=\"android.permission.INTERNET\"/>",  
                    "<uses-permission android:name=\"android.permission.MODIFY_AUDIO_SETTINGS\"/>",  
                    "<uses-permission android:name=\"android.permission.MOUNT_UNMOUNT_FILESYSTEMS\"/>",  
                    "<uses-permission android:name=\"android.permission.READ_EXTERNAL_STORAGE\"/>",  
                    "<uses-permission android:name=\"android.permission.READ_LOGS\"/>",  
                    "<uses-permission android:name=\"android.permission.READ_PHONE_STATE\"/>",  
                    "<uses-permission android:name=\"android.permission.RECORD_AUDIO\"/>",  
                    "<uses-permission android:name=\"android.permission.VIBRATE\"/>",  
                    "<uses-permission android:name=\"android.permission.WAKE_LOCK\"/>",  
                    "<uses-permission android:name=\"android.permission.WRITE_EXTERNAL_STORAGE\"/>",  
                    "<uses-permission android:name=\"android.permission.WRITE_SETTINGS\"/>"  
                ],  
                "targetSdkVersion" : 31,  
                "schemes" : "shangxiaomeng",  
                "abiFilters" : [ "armeabi-v7a", "arm64-v8a" ],  
                "minSdkVersion" : 24,  
                "hasTaskAffinity" : true,  
                "debuggable" : false  
 }

打包apk后进行反编译,发现清单文件中出现:

<receiver android:directBootAware="false" android:enabled="true" android:exported="true" android:name="androidx.profileinstaller.ProfileInstallReceiver" android:permission="android.permission.DUMP">  
            <intent-filter>  
                <action android:name="androidx.profileinstaller.action.INSTALL_PROFILE"/>  
            </intent-filter>  
            <intent-filter>  
                <action android:name="androidx.profileinstaller.action.SKIP_FILE"/>  
            </intent-filter>  
            <intent-filter>  
                <action android:name="androidx.profileinstaller.action.SAVE_PROFILE"/>  
            </intent-filter>  
            <intent-filter>  
                <action android:name="androidx.profileinstaller.action.BENCHMARK_OPERATION"/>  
            </intent-filter>  
</receiver>  

因为这个被扫描出中危漏洞,有没有懂这个的哥们姐们帮帮忙如何处理。

2025-07-25 15:36 负责人:无 分享
已邀请:

要回复问题请先登录注册