omi
omi copied to clipboard
Google Maps Api keys disclosed in apk/ipa distributed via app stores
Describe the bug Google Maps Api keys can be extracted from distributed apk and ipa files
To Reproduce Steps to reproduce the behavior:
- Download APK
- Extract api key
- Use Google Maps for your own tasks, Omi will pay
Current behavior Google Maps Api keys disclosed in apk/ipa distributed via app stores
Expected behavior
- Api keys must be placed behind the backend proxy
- All requests must be signed