can Build Types resources be visible while reverse engineering the app?









up vote
0
down vote

favorite












I have two build variant in my Application, one is release and other is debug.



In a release, I have set my https URL. In Debug, I have set my local URL for testing purpose.



is it possible if I upload my release variant to PlayStore that somebody can reverse engineered it and see my Local testing URL? I dont want to expose my testing URL?










share|improve this question

























    up vote
    0
    down vote

    favorite












    I have two build variant in my Application, one is release and other is debug.



    In a release, I have set my https URL. In Debug, I have set my local URL for testing purpose.



    is it possible if I upload my release variant to PlayStore that somebody can reverse engineered it and see my Local testing URL? I dont want to expose my testing URL?










    share|improve this question























      up vote
      0
      down vote

      favorite









      up vote
      0
      down vote

      favorite











      I have two build variant in my Application, one is release and other is debug.



      In a release, I have set my https URL. In Debug, I have set my local URL for testing purpose.



      is it possible if I upload my release variant to PlayStore that somebody can reverse engineered it and see my Local testing URL? I dont want to expose my testing URL?










      share|improve this question













      I have two build variant in my Application, one is release and other is debug.



      In a release, I have set my https URL. In Debug, I have set my local URL for testing purpose.



      is it possible if I upload my release variant to PlayStore that somebody can reverse engineered it and see my Local testing URL? I dont want to expose my testing URL?







      android reverse-engineering






      share|improve this question













      share|improve this question











      share|improve this question




      share|improve this question










      asked Nov 9 at 19:20









      Aman Verma

      81521129




      81521129






















          1 Answer
          1






          active

          oldest

          votes

















          up vote
          0
          down vote













          If you just use flag to switch running environment and sorce code contain the local testing URL, it'll able to find in the disassembled smali files even if you obfuscated it



          You can try to split building const from resource using gradle, ref here:
          Change constant values when building a release edition






          share|improve this answer




















            Your Answer






            StackExchange.ifUsing("editor", function ()
            StackExchange.using("externalEditor", function ()
            StackExchange.using("snippets", function ()
            StackExchange.snippets.init();
            );
            );
            , "code-snippets");

            StackExchange.ready(function()
            var channelOptions =
            tags: "".split(" "),
            id: "1"
            ;
            initTagRenderer("".split(" "), "".split(" "), channelOptions);

            StackExchange.using("externalEditor", function()
            // Have to fire editor after snippets, if snippets enabled
            if (StackExchange.settings.snippets.snippetsEnabled)
            StackExchange.using("snippets", function()
            createEditor();
            );

            else
            createEditor();

            );

            function createEditor()
            StackExchange.prepareEditor(
            heartbeatType: 'answer',
            convertImagesToLinks: true,
            noModals: true,
            showLowRepImageUploadWarning: true,
            reputationToPostImages: 10,
            bindNavPrevention: true,
            postfix: "",
            imageUploader:
            brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
            contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
            allowUrls: true
            ,
            onDemand: true,
            discardSelector: ".discard-answer"
            ,immediatelyShowMarkdownHelp:true
            );



            );













             

            draft saved


            draft discarded


















            StackExchange.ready(
            function ()
            StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53232057%2fcan-build-types-resources-be-visible-while-reverse-engineering-the-app%23new-answer', 'question_page');

            );

            Post as a guest















            Required, but never shown

























            1 Answer
            1






            active

            oldest

            votes








            1 Answer
            1






            active

            oldest

            votes









            active

            oldest

            votes






            active

            oldest

            votes








            up vote
            0
            down vote













            If you just use flag to switch running environment and sorce code contain the local testing URL, it'll able to find in the disassembled smali files even if you obfuscated it



            You can try to split building const from resource using gradle, ref here:
            Change constant values when building a release edition






            share|improve this answer
























              up vote
              0
              down vote













              If you just use flag to switch running environment and sorce code contain the local testing URL, it'll able to find in the disassembled smali files even if you obfuscated it



              You can try to split building const from resource using gradle, ref here:
              Change constant values when building a release edition






              share|improve this answer






















                up vote
                0
                down vote










                up vote
                0
                down vote









                If you just use flag to switch running environment and sorce code contain the local testing URL, it'll able to find in the disassembled smali files even if you obfuscated it



                You can try to split building const from resource using gradle, ref here:
                Change constant values when building a release edition






                share|improve this answer












                If you just use flag to switch running environment and sorce code contain the local testing URL, it'll able to find in the disassembled smali files even if you obfuscated it



                You can try to split building const from resource using gradle, ref here:
                Change constant values when building a release edition







                share|improve this answer












                share|improve this answer



                share|improve this answer










                answered 18 hours ago









                waynelpu

                6816




                6816



























                     

                    draft saved


                    draft discarded















































                     


                    draft saved


                    draft discarded














                    StackExchange.ready(
                    function ()
                    StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53232057%2fcan-build-types-resources-be-visible-while-reverse-engineering-the-app%23new-answer', 'question_page');

                    );

                    Post as a guest















                    Required, but never shown





















































                    Required, but never shown














                    Required, but never shown












                    Required, but never shown







                    Required, but never shown

































                    Required, but never shown














                    Required, but never shown












                    Required, but never shown







                    Required, but never shown







                    Popular posts from this blog

                    Use pre created SQLite database for Android project in kotlin

                    Darth Vader #20

                    Ondo