organ
/
Sanmill
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

flutter: Fix gradle/wrapper/gradle-wrapper.properties is missing distributionSha256Sum. 

This means that the gradle download is not verified.
We recommend explicitly setting the expected Sha256sum to protect you and your apps if a bad actor gets access to the Gradle servers or manages to MitM your internet connection.
Please note that Android Studio does not currently support this and may or may  not crash, but we suggest you try our suggestion anyway to improve the security of yourself and your app.

See: https://gitlab.com/fdroid/fdroiddata/-/merge_requests/8917
This commit is contained in:
Calcitem 2021-05-06 00:28:08 +08:00
parent e9c4978dc8
commit 1a099a3a64
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
src/ui/flutter_app/android/gradle/wrapper/gradle-wrapper.properties vendored
View File

@ -3,3 +3,4 @@ distributionPath=wrapper/dists
zipStoreBase=GRADLE_USER_HOME
zipStorePath=wrapper/dists
distributionUrl=https\://services.gradle.org/distributions/gradle-6.5-all.zip
distributionSha256Sum=c9910513d0eed63cd8f5c7fec4cb4a05731144770104a0871234a4edc3ba3cef