{"action":"created","issue":{"url":"https://api.github.com/repos/Microsoft/AppCenter-SDK-DotNet/issues/745","repository_url":"https://api.github.com/repos/Microsoft/AppCenter-SDK-DotNet","labels_url":"https://api.github.com/repos/Microsoft/AppCenter-SDK-DotNet/issues/745/labels{/name}","comments_url":"https://api.github.com/repos/Microsoft/AppCenter-SDK-DotNet/issues/745/comments","events_url":"https://api.github.com/repos/Microsoft/AppCenter-SDK-DotNet/issues/745/events","html_url":"https://github.com/Microsoft/AppCenter-SDK-DotNet/issues/745","id":355451256,"node_id":"MDU6SXNzdWUzNTU0NTEyNTY=","number":745,"title":"Vulnerability on Android","user":{"login":"Manne990","id":13848163,"node_id":"MDQ6VXNlcjEzODQ4MTYz","avatar_url":"https://avatars2.githubusercontent.com/u/13848163?v=4","gravatar_id":"","url":"https://api.github.com/users/Manne990","html_url":"https://github.com/Manne990","followers_url":"https://api.github.com/users/Manne990/followers","following_url":"https://api.github.com/users/Manne990/following{/other_user}","gists_url":"https://api.github.com/users/Manne990/gists{/gist_id}","starred_url":"https://api.github.com/users/Manne990/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Manne990/subscriptions","organizations_url":"https://api.github.com/users/Manne990/orgs","repos_url":"https://api.github.com/users/Manne990/repos","events_url":"https://api.github.com/users/Manne990/events{/privacy}","received_events_url":"https://api.github.com/users/Manne990/received_events","type":"User","site_admin":false},"labels":[{"id":441399559,"node_id":"MDU6TGFiZWw0NDEzOTk1NTk=","url":"https://api.github.com/repos/Microsoft/AppCenter-SDK-DotNet/labels/bug","name":"bug","color":"ee0701","default":true},{"id":657336582,"node_id":"MDU6TGFiZWw2NTczMzY1ODI=","url":"https://api.github.com/repos/Microsoft/AppCenter-SDK-DotNet/labels/support","name":"support","color":"f9d0c4","default":false}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":1,"created_at":"2018-08-30T07:04:27Z","updated_at":"2018-09-04T18:18:46Z","closed_at":null,"author_association":"NONE","body":"<!--\r\n    Thanks for your interest in using the App Center SDK for .NET platforms.\r\n    If your issue is not related to using our .NET SDK but rather about the product experience like the portal or CI,\r\n    please create a ticket using the blue chat button on any page of the https://appcenter.ms portal instead.\r\n-->\r\n\r\n### **Description**\r\n\r\nAn app I made went through a security and vulnerability test and they found a risk for SQL injection (see the attached image).\r\n\r\n### **Repro Steps**\r\n\r\nPlease list the steps used to reproduce your issue.\r\n\r\n1.\r\n2.\r\n\r\n### **Details**\r\n\r\n1. What is your app platform (Xamarin.Android or Xamarin.iOS or UWP)?\r\n    Xamarin Android\r\n2. If using Xamarin.Forms or if using portable/shared code to call our SDK APIs, are you using shared project, PCL code or .NET standard code for the application? Which .NET standard version or which PCL profile?\r\n    NET standard 2.0.\r\n2. Which SDK version are you using?\r\n    1.7\r\n4. Which OS version did you experience the issue on?\r\n    Android. Not sure of the api level.\r\n5. What device version did you see this error on?  Were you using an emulator or a physical device?\r\n    Not sure.\r\n6. What third party libraries are you using?\r\n<?xml version=\"1.0\" encoding=\"utf-8\"?>\r\n<packages>\r\n  <package id=\"Autofac\" version=\"4.8.1\" targetFramework=\"monoandroid81\" />\r\n  <package id=\"AutoMapper\" version=\"7.0.1\" targetFramework=\"monoandroid81\" />\r\n  <package id=\"Fody\" version=\"3.0.3\" targetFramework=\"monoandroid81\" developmentDependency=\"true\" />\r\n  <package id=\"Microsoft.AppCenter\" version=\"1.7.0\" targetFramework=\"monoandroid81\" />\r\n  <package id=\"Microsoft.AppCenter.Analytics\" version=\"1.7.0\" targetFramework=\"monoandroid81\" />\r\n  <package id=\"Microsoft.AppCenter.Crashes\" version=\"1.7.0\" targetFramework=\"monoandroid81\" />\r\n  <package id=\"Microsoft.CSharp\" version=\"4.5.0\" targetFramework=\"monoandroid81\" />\r\n  <package id=\"Microsoft.NETCore.Platforms\" version=\"2.1.0\" targetFramework=\"monoandroid81\" />\r\n  <package id=\"Microsoft.Win32.Primitives\" version=\"4.3.0\" targetFramework=\"monoandroid81\" />\r\n  <package id=\"MvvmMobile.Core\" version=\"1.0.1\" targetFramework=\"monoandroid81\" />\r\n  <package id=\"MvvmMobile.Droid\" version=\"1.0.1\" targetFramework=\"monoandroid81\" />\r\n  <package id=\"NETStandard.Library\" version=\"2.0.3\" targetFramework=\"monoandroid81\" />\r\n  <package id=\"Newtonsoft.Json\" version=\"11.0.2\" targetFramework=\"monoandroid81\" />\r\n  <package id=\"Realm\" version=\"3.1.0\" targetFramework=\"monoandroid81\" />\r\n  <package id=\"Realm.Database\" version=\"3.1.0\" targetFramework=\"monoandroid81\" />\r\n  <package id=\"Realm.DataBinding\" version=\"1.2.0\" targetFramework=\"monoandroid81\" />\r\n  <package id=\"Remotion.Linq\" version=\"2.1.2\" targetFramework=\"monoandroid81\" />\r\n  <package id=\"System.AppContext\" version=\"4.3.0\" targetFramework=\"monoandroid81\" />\r\n  <package id=\"System.Collections\" version=\"4.3.0\" targetFramework=\"monoandroid81\" />\r\n  <package id=\"System.Collections.Concurrent\" version=\"4.3.0\" targetFramework=\"monoandroid81\" />\r\n  <package id=\"System.Collections.Specialized\" version=\"4.3.0\" targetFramework=\"monoandroid81\" />\r\n  <package id=\"System.ComponentModel\" version=\"4.0.1\" targetFramework=\"monoandroid81\" />\r\n  <package id=\"System.ComponentModel.TypeConverter\" version=\"4.3.0\" targetFramework=\"monoandroid81\" />\r\n  <package id=\"System.Console\" version=\"4.3.0\" targetFramework=\"monoandroid81\" />\r\n  <package id=\"System.Diagnostics.Debug\" version=\"4.3.0\" targetFramework=\"monoandroid81\" />\r\n  <package id=\"System.Diagnostics.Tools\" version=\"4.3.0\" targetFramework=\"monoandroid81\" />\r\n  <package id=\"System.Diagnostics.Tracing\" version=\"4.3.0\" targetFramework=\"monoandroid81\" />\r\n  <package id=\"System.Dynamic.Runtime\" version=\"4.3.0\" targetFramework=\"monoandroid81\" />\r\n  <package id=\"System.Globalization\" version=\"4.3.0\" targetFramework=\"monoandroid81\" />\r\n  <package id=\"System.Globalization.Calendars\" version=\"4.3.0\" targetFramework=\"monoandroid81\" />\r\n  <package id=\"System.IO\" version=\"4.3.0\" targetFramework=\"monoandroid81\" />\r\n  <package id=\"System.IO.Compression\" version=\"4.3.0\" targetFramework=\"monoandroid81\" />\r\n  <package id=\"System.IO.Compression.ZipFile\" version=\"4.3.0\" targetFramework=\"monoandroid81\" />\r\n  <package id=\"System.IO.FileSystem\" version=\"4.3.0\" targetFramework=\"monoandroid81\" />\r\n  <package id=\"System.IO.FileSystem.Primitives\" version=\"4.3.0\" targetFramework=\"monoandroid81\" />\r\n  <package id=\"System.Linq\" version=\"4.3.0\" targetFramework=\"monoandroid81\" />\r\n  <package id=\"System.Linq.Expressions\" version=\"4.3.0\" targetFramework=\"monoandroid81\" />\r\n  <package id=\"System.Linq.Queryable\" version=\"4.3.0\" targetFramework=\"monoandroid81\" />\r\n  <package id=\"System.Net.Http\" version=\"4.3.0\" targetFramework=\"monoandroid81\" />\r\n  <package id=\"System.Net.Primitives\" version=\"4.3.0\" targetFramework=\"monoandroid81\" />\r\n  <package id=\"System.Net.Sockets\" version=\"4.3.0\" targetFramework=\"monoandroid81\" />\r\n  <package id=\"System.ObjectModel\" version=\"4.3.0\" targetFramework=\"monoandroid81\" />\r\n  <package id=\"System.Reflection\" version=\"4.3.0\" targetFramework=\"monoandroid81\" />\r\n  <package id=\"System.Reflection.Emit\" version=\"4.3.0\" targetFramework=\"monoandroid81\" />\r\n  <package id=\"System.Reflection.Extensions\" version=\"4.3.0\" targetFramework=\"monoandroid81\" />\r\n  <package id=\"System.Reflection.Primitives\" version=\"4.3.0\" targetFramework=\"monoandroid81\" />\r\n  <package id=\"System.Reflection.TypeExtensions\" version=\"4.3.0\" targetFramework=\"monoandroid81\" />\r\n  <package id=\"System.Resources.ResourceManager\" version=\"4.3.0\" targetFramework=\"monoandroid81\" />\r\n  <package id=\"System.Runtime\" version=\"4.3.0\" targetFramework=\"monoandroid81\" />\r\n  <package id=\"System.Runtime.CompilerServices.Unsafe\" version=\"4.4.0\" targetFramework=\"monoandroid81\" />\r\n  <package id=\"System.Runtime.Extensions\" version=\"4.3.0\" targetFramework=\"monoandroid81\" />\r\n  <package id=\"System.Runtime.Handles\" version=\"4.3.0\" targetFramework=\"monoandroid81\" />\r\n  <package id=\"System.Runtime.InteropServices\" version=\"4.3.0\" targetFramework=\"monoandroid81\" />\r\n  <package id=\"System.Runtime.InteropServices.RuntimeInformation\" version=\"4.3.0\" targetFramework=\"monoandroid81\" />\r\n  <package id=\"System.Runtime.Numerics\" version=\"4.3.0\" targetFramework=\"monoandroid81\" />\r\n  <package id=\"System.Runtime.Serialization.Formatters\" version=\"4.3.0\" targetFramework=\"monoandroid81\" />\r\n  <package id=\"System.Runtime.Serialization.Primitives\" version=\"4.3.0\" targetFramework=\"monoandroid81\" />\r\n  <package id=\"System.Security.Cryptography.Algorithms\" version=\"4.3.0\" targetFramework=\"monoandroid81\" />\r\n  <package id=\"System.Security.Cryptography.Encoding\" version=\"4.3.0\" targetFramework=\"monoandroid81\" />\r\n  <package id=\"System.Security.Cryptography.Primitives\" version=\"4.3.0\" targetFramework=\"monoandroid81\" />\r\n  <package id=\"System.Security.Cryptography.X509Certificates\" version=\"4.3.0\" targetFramework=\"monoandroid81\" />\r\n  <package id=\"System.Text.Encoding\" version=\"4.3.0\" targetFramework=\"monoandroid81\" />\r\n  <package id=\"System.Text.Encoding.Extensions\" version=\"4.3.0\" targetFramework=\"monoandroid81\" />\r\n  <package id=\"System.Text.RegularExpressions\" version=\"4.3.0\" targetFramework=\"monoandroid81\" />\r\n  <package id=\"System.Threading\" version=\"4.3.0\" targetFramework=\"monoandroid81\" />\r\n  <package id=\"System.Threading.Tasks\" version=\"4.3.0\" targetFramework=\"monoandroid81\" />\r\n  <package id=\"System.Threading.Timer\" version=\"4.3.0\" targetFramework=\"monoandroid81\" />\r\n  <package id=\"System.ValueTuple\" version=\"4.5.0\" targetFramework=\"monoandroid81\" />\r\n  <package id=\"System.Xml.ReaderWriter\" version=\"4.3.0\" targetFramework=\"monoandroid81\" />\r\n  <package id=\"System.Xml.XDocument\" version=\"4.3.0\" targetFramework=\"monoandroid81\" />\r\n  <package id=\"System.Xml.XmlDocument\" version=\"4.3.0\" targetFramework=\"monoandroid81\" />\r\n  <package id=\"Xamarin.Android.Arch.Core.Common\" version=\"1.0.0.1\" targetFramework=\"monoandroid81\" />\r\n  <package id=\"Xamarin.Android.Arch.Lifecycle.Common\" version=\"1.0.3.1\" targetFramework=\"monoandroid81\" />\r\n  <package id=\"Xamarin.Android.Arch.Lifecycle.Runtime\" version=\"1.0.3.1\" targetFramework=\"monoandroid81\" />\r\n  <package id=\"Xamarin.Android.Support.Animated.Vector.Drawable\" version=\"27.0.2.1\" targetFramework=\"monoandroid81\" />\r\n  <package id=\"Xamarin.Android.Support.Annotations\" version=\"27.0.2.1\" targetFramework=\"monoandroid81\" />\r\n  <package id=\"Xamarin.Android.Support.Compat\" version=\"27.0.2.1\" targetFramework=\"monoandroid81\" />\r\n  <package id=\"Xamarin.Android.Support.Core.UI\" version=\"27.0.2.1\" targetFramework=\"monoandroid81\" />\r\n  <package id=\"Xamarin.Android.Support.Core.Utils\" version=\"27.0.2.1\" targetFramework=\"monoandroid81\" />\r\n  <package id=\"Xamarin.Android.Support.Design\" version=\"27.0.2.1\" targetFramework=\"monoandroid81\" />\r\n  <package id=\"Xamarin.Android.Support.Fragment\" version=\"27.0.2.1\" targetFramework=\"monoandroid81\" />\r\n  <package id=\"Xamarin.Android.Support.Media.Compat\" version=\"27.0.2.1\" targetFramework=\"monoandroid81\" />\r\n  <package id=\"Xamarin.Android.Support.Transition\" version=\"27.0.2.1\" targetFramework=\"monoandroid81\" />\r\n  <package id=\"Xamarin.Android.Support.v4\" version=\"27.0.2.1\" targetFramework=\"monoandroid81\" />\r\n  <package id=\"Xamarin.Android.Support.v7.AppCompat\" version=\"27.0.2.1\" targetFramework=\"monoandroid81\" />\r\n  <package id=\"Xamarin.Android.Support.v7.CardView\" version=\"27.0.2.1\" targetFramework=\"monoandroid81\" />\r\n  <package id=\"Xamarin.Android.Support.v7.RecyclerView\" version=\"27.0.2.1\" targetFramework=\"monoandroid81\" />\r\n  <package id=\"Xamarin.Android.Support.Vector.Drawable\" version=\"27.0.2.1\" targetFramework=\"monoandroid81\" />\r\n</packages>\r\n7. Please enable verbose logging for your app using `AppCenter.LogLevel = LogLevel.Verbose` before your call to `AppCenter.Start(...)` and include the logs here:\r\n<img width=\"888\" alt=\"skarmavbild 2018-08-30 kl 08 49 35\" src=\"https://user-images.githubusercontent.com/13848163/44834944-d95ea180-ac32-11e8-8f0b-437d858ba7d0.png\">\r\n"},"comment":{"url":"https://api.github.com/repos/Microsoft/AppCenter-SDK-DotNet/issues/comments/418468057","html_url":"https://github.com/Microsoft/AppCenter-SDK-DotNet/issues/745#issuecomment-418468057","issue_url":"https://api.github.com/repos/Microsoft/AppCenter-SDK-DotNet/issues/745","id":418468057,"node_id":"MDEyOklzc3VlQ29tbWVudDQxODQ2ODA1Nw==","user":{"login":"guperrot","id":623672,"node_id":"MDQ6VXNlcjYyMzY3Mg==","avatar_url":"https://avatars3.githubusercontent.com/u/623672?v=4","gravatar_id":"","url":"https://api.github.com/users/guperrot","html_url":"https://github.com/guperrot","followers_url":"https://api.github.com/users/guperrot/followers","following_url":"https://api.github.com/users/guperrot/following{/other_user}","gists_url":"https://api.github.com/users/guperrot/gists{/gist_id}","starred_url":"https://api.github.com/users/guperrot/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/guperrot/subscriptions","organizations_url":"https://api.github.com/users/guperrot/orgs","repos_url":"https://api.github.com/users/guperrot/repos","events_url":"https://api.github.com/users/guperrot/events{/privacy}","received_events_url":"https://api.github.com/users/guperrot/received_events","type":"User","site_admin":false},"created_at":"2018-09-04T18:18:46Z","updated_at":"2018-09-04T18:18:46Z","author_association":"MEMBER","body":"Hi, do you have more details about what exactly triggers the scan like at least line numbers and version of the SDK?"}}
{"actor":{"display_login":"guperrot"}}