-
Notifications
You must be signed in to change notification settings - Fork 12
/
Copy pathlint-baseline.xml
132 lines (119 loc) · 6.36 KB
/
lint-baseline.xml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
<?xml version="1.0" encoding="UTF-8"?>
<issues format="6" by="lint 8.0.0" type="baseline" client="gradle" dependencies="false" name="AGP (8.0.0)" variant="all" version="8.0.0">
<issue
id="DuplicatePlatformClasses"
message="`commons-logging` defines classes that conflict with classes now provided by Android. Solutions include finding newer versions or alternative libraries that don't have the same problem (for example, for `httpclient` use `HttpUrlConnection` or `okhttp` instead), or repackaging the library using something like `jarjar`.">
<location
file="build.gradle"/>
</issue>
<issue
id="DuplicatePlatformClasses"
message="`httpclient` defines classes that conflict with classes now provided by Android. Solutions include finding newer versions or alternative libraries that don't have the same problem (for example, for `httpclient` use `HttpUrlConnection` or `okhttp` instead), or repackaging the library using something like `jarjar`."
errorLine1=" implementation "io.swagger:swagger-annotations:$swagger_annotations_version""
errorLine2=" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~">
<location
file="build.gradle"
line="38"
column="5"/>
</issue>
<issue
id="OldTargetApi"
message="Not targeting the latest versions of Android; compatibility modes apply. Consider testing and updating this version. Consult the android.os.Build.VERSION_CODES javadoc for details."
errorLine1=" targetSdkVersion 33"
errorLine2=" ~~~~~~~~~~~~~~~~~~~">
<location
file="build.gradle"
line="13"
column="9"/>
</issue>
<issue
id="SimpleDateFormat"
message="To get local formatting use `getDateInstance()`, `getDateTimeInstance()`, or `getTimeInstance()`, or use `new SimpleDateFormat(String template, Locale locale)` with for example `Locale.US` for ASCII dates."
errorLine1=" public static final SimpleDateFormat DATE_TIME_FORMAT = new SimpleDateFormat("yyyy-MM-dd'T'HH:mm:ss.SSSZ");"
errorLine2=" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~">
<location
file="src/main/java/io/conekta/ApiInvoker.java"
line="84"
column="59"/>
</issue>
<issue
id="SimpleDateFormat"
message="To get local formatting use `getDateInstance()`, `getDateTimeInstance()`, or `getTimeInstance()`, or use `new SimpleDateFormat(String template, Locale locale)` with for example `Locale.US` for ASCII dates."
errorLine1=" public static final SimpleDateFormat DATE_FORMAT = new SimpleDateFormat("yyyy-MM-dd");"
errorLine2=" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~">
<location
file="src/main/java/io/conekta/ApiInvoker.java"
line="90"
column="54"/>
</issue>
<issue
id="GradleDependency"
message="A newer version of org.apache.httpcomponents:httpcore than 4.4.13 is available: 4.4.16"
errorLine1="dependencies {"
errorLine2=" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~">
<location
file="build.gradle"
line="37"
column="20"/>
</issue>
<issue
id="GradleDependency"
message="A newer version of org.apache.httpcomponents:httpclient than 4.5.13 is available: 4.5.14"
errorLine1=" implementation "io.swagger:swagger-annotations:$swagger_annotations_version""
errorLine2=" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~">
<location
file="build.gradle"
line="38"
column="20"/>
</issue>
<issue
id="GradleDependency"
message="A newer version of junit:junit than 4.13 is available: 4.13.2"
errorLine1=" implementation ("org.apache.httpcomponents:httpmime:$httpclient_version") {"
errorLine2=" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~">
<location
file="build.gradle"
line="45"
column="24"/>
</issue>
<issue
id="TrulyRandom"
message="Potentially insecure random numbers on Android 4.3 and older. Read https://android-developers.blogspot.com/2013/08/some-securerandom-thoughts.html for more info."
errorLine1=" sslContext.init(null, trustManagers, new SecureRandom());"
errorLine2=" ~~~~~~~~~~~~">
<location
file="src/main/java/io/conekta/ApiInvoker.java"
line="436"
column="48"/>
</issue>
<issue
id="TrustAllX509TrustManager"
message="`checkClientTrusted` is empty, which could cause insecure network traffic due to trusting arbitrary TLS/SSL certificates presented by peers"
errorLine1=" public void checkClientTrusted(X509Certificate[] certs, String authType) {}"
errorLine2=" ~~~~~~~~~~~~~~~~~~">
<location
file="src/main/java/io/conekta/ApiInvoker.java"
line="432"
column="23"/>
</issue>
<issue
id="TrustAllX509TrustManager"
message="`checkServerTrusted` is empty, which could cause insecure network traffic due to trusting arbitrary TLS/SSL certificates presented by peers"
errorLine1=" public void checkServerTrusted(X509Certificate[] certs, String authType) {}"
errorLine2=" ~~~~~~~~~~~~~~~~~~">
<location
file="src/main/java/io/conekta/ApiInvoker.java"
line="433"
column="23"/>
</issue>
<issue
id="CustomX509TrustManager"
message="Implementing a custom `X509TrustManager` is error-prone and likely to be insecure. It is likely to disable certificate validation altogether, and is non-trivial to implement correctly without calling Android's default implementation."
errorLine1=" new X509TrustManager() {"
errorLine2=" ~~~~~~~~~~~~~~~~">
<location
file="src/main/java/io/conekta/ApiInvoker.java"
line="428"
column="13"/>
</issue>
</issues>