Search code examples
androidfacebookfacebook-android-sdkfacebook-audience-network

Android vulnerable to JavaScript interface injection issue


Today i have received email like following,

Security alert

Your app includes a WebView that is vulnerable to JavaScript interface injection. Please see this Google Help Center article for details.

Vulnerable locations:

com.facebook.ads.internal.view.b.a->

com.facebook.ads.internal.view.m->c

Please fix the issue before: 03/27/2019

Any idea how to fix this issue?

Update:

I am using this sdk of facabook.

'com.facebook.android:audience-network-sdk:4.99.1'

Solution

  • The current version of the SDK is 5.1.0, you should upgrade: https://developers.facebook.com/docs/audience-network/download/

    Date of the update: October 31, 2018

    It should hopefully fix your issue. If that does not solve it, you could create a bug report so they include a fix in the next versions: https://developers.facebook.com/support/bugs/