[v14.1] Migrate API key and secret from Info.plist (and AndroidManifest.xml on Android) to Shake.start()
complete
Peter Simic
The API key and secret are currently put into Info.plist during implementation. Since Info.plist is insecure by default, malicious developers could add new apps to our workspace by creating new apps with dummy Bundle IDs.
This would also further simplify Shake implementation process and make it more similar to other SDKs on the market.
The same thing happens with AndroidManifest.xml on Android.
Log In
Peter Simic
complete
API keys have been migrated on all four SDKs now 🎉 As always, visit the Docs to learn more: https://www.shakebugs.com/docs/
Peter Simic
[New] React Native › Complete. You can now update Shake React Native SDK to v14.1 to enjoy this new and better approach: https://www.shakebugs.com/docs/react/react-releases#1411
Peter Simic
We've dialed up the security of the SDK by updating the start method in version 14.1.1.
Current status:
- Android › Now available: https://www.shakebugs.com/docs/android/android-releases#1411
- iOS › Now available: https://www.shakebugs.com/docs/ios/ios-releases#1411
- Flutter › In progress
- React Native › In progress
Peter Simic
in progress
Let's take care of this now 🎉
Peter Simic
planned
Peter Simic
Until we release this:
- Our systems proactively monitor for any exceptions
- In case this happens to you, our Free users can archive those apps themselves. We also invite you to contact us as well so our engineers can investigate it further.
- This goes without saying, but our Premium users will not be billed for those dummy apps. In case they are automatically billed, we will always refund them — fully and immediately.