Issue
In our application, during the security testing, they were able to get the request and response details from the memory dump. Please find the following details they were able to get from the dump, is there any option or process we can implement to remove this from happening:
CordovaHttpPlugin
post https:/XXXXXXXXXX/XXXXXXXXXX/login
username: XXXXXXXX
password XXXXXXX
json
Authorization
Bearer
null
Content-Type
application/json
Accept
text
ionic
Security team is using tool "fridump" for getting the memory data.
Is there any possible methods in ionic or tools that we can add to avoid this type of memory dump.
Solution
We were not able to resolve the issue. The security team advised us to prevent the application from installing in a rooted device for now, and also have all the data saved in the mobile side encrypted.
Answered By - Vinu V
0 comments:
Post a Comment
Note: Only a member of this blog may post a comment.