{"action":"created","issue":{"url":"https://api.github.com/repos/wyouflf/xUtils3/issues/460","repository_url":"https://api.github.com/repos/wyouflf/xUtils3","labels_url":"https://api.github.com/repos/wyouflf/xUtils3/issues/460/labels{/name}","comments_url":"https://api.github.com/repos/wyouflf/xUtils3/issues/460/comments","events_url":"https://api.github.com/repos/wyouflf/xUtils3/issues/460/events","html_url":"https://github.com/wyouflf/xUtils3/issues/460","id":193260113,"number":460,"title":"(请重视并尽快更新！) HostnameVerifier 不安全的问题","user":{"login":"harinlin","id":4169326,"avatar_url":"https://avatars.githubusercontent.com/u/4169326?v=3","gravatar_id":"","url":"https://api.github.com/users/harinlin","html_url":"https://github.com/harinlin","followers_url":"https://api.github.com/users/harinlin/followers","following_url":"https://api.github.com/users/harinlin/following{/other_user}","gists_url":"https://api.github.com/users/harinlin/gists{/gist_id}","starred_url":"https://api.github.com/users/harinlin/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/harinlin/subscriptions","organizations_url":"https://api.github.com/users/harinlin/orgs","repos_url":"https://api.github.com/users/harinlin/repos","events_url":"https://api.github.com/users/harinlin/events{/privacy}","received_events_url":"https://api.github.com/users/harinlin/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":2,"created_at":"2016-12-03T02:38:39Z","updated_at":"2016-12-09T04:27:07Z","closed_at":null,"body":" HostnameVerifier 不安全的问题，已经被google play列为规范！！！\r\n具体规范链接：\r\nhttps://support.google.com/faqs/answer/7188426\r\n具体内容：\r\n## **从 2017 年 3 月 1 日起，只要新应用或应用更新采用的 HostnameVerifier 的实施方式不安全，一律禁止在 Google Play 发布。您已发布的 APK 版本不会受到影响，但是，如果不解决此漏洞，您将无法为应用发布任何更新。**\r\n\r\n项目里的具体代码：\r\nx.java\r\n`        static {\r\n            TaskControllerImpl.registerInstance();\r\n            // 默认信任所有https域名\r\n            HttpsURLConnection.setDefaultHostnameVerifier(new HostnameVerifier() {\r\n                @Override\r\n                public boolean verify(String hostname, SSLSession session) {\r\n                    return true;\r\n                }\r\n            });\r\n        }`"},"comment":{"url":"https://api.github.com/repos/wyouflf/xUtils3/issues/comments/265930842","html_url":"https://github.com/wyouflf/xUtils3/issues/460#issuecomment-265930842","issue_url":"https://api.github.com/repos/wyouflf/xUtils3/issues/460","id":265930842,"user":{"login":"reaper12","id":13657190,"avatar_url":"https://avatars.githubusercontent.com/u/13657190?v=3","gravatar_id":"","url":"https://api.github.com/users/reaper12","html_url":"https://github.com/reaper12","followers_url":"https://api.github.com/users/reaper12/followers","following_url":"https://api.github.com/users/reaper12/following{/other_user}","gists_url":"https://api.github.com/users/reaper12/gists{/gist_id}","starred_url":"https://api.github.com/users/reaper12/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/reaper12/subscriptions","organizations_url":"https://api.github.com/users/reaper12/orgs","repos_url":"https://api.github.com/users/reaper12/repos","events_url":"https://api.github.com/users/reaper12/events{/privacy}","received_events_url":"https://api.github.com/users/reaper12/received_events","type":"User","site_admin":false},"created_at":"2016-12-09T04:27:06Z","updated_at":"2016-12-09T04:27:06Z","body":"setDefaultHostnameVerifier不是可以自己去设置吗？HttpsURLConnection.setDefaultHostnameVerifier是个静态方法啊"}}
{"actor":{"display_login":"reaper12"}}