WebViewClient.onReceivedSslError 忽略所有 SSL 证书验证错误

google上的警告:
Security alert Your application has an unsafe implementation of the WebViewClient.onReceivedSslError handler. Specifically, the implementation ignores all SSL certificate validation errors, making your app vulnerable to man-in-the-middle attacks. An attacker could change the affected WebView’s content, read transmitted data (such as login credentials), and execute code inside the app using JavaScript. To properly handle SSL certificate validation, change your code to invoke SslErrorHandler.proceed() whenever the certificate presented by the server meets your expectations, and invoke SslErrorHandler.cancel() otherwise. An email alert containing the affected app(s) and class(es) has been sent to your developer account address. Please address this vulnerability as soon as possible and increment the version number of the upgraded APK. For more information about the SSL error handler, please see our documentation in the Developer Help Center. For other technical questions, you can post to https://www.stackoverflow.com/questions and use the tags “android-security” and “SslErrorHandler.” If you are using a 3rd party library that’s responsible for this, please notify the 3rd party and work with them to address the issue. To confirm that you’ve upgraded correctly, upload the updated version to the Developer Console and check back after five hours. If the app hasn’t been correctly upgraded, we will display a warning. Please note, while these specific issues may not affect every app that uses WebView SSL, it’s best to stay up to date on all security patches. Apps with vulnerabilities that expose users to risk of compromise may be considered dangerous products in violation of the Content Policy and section 4.4 of the Developer Distribution Agreement. Please ensure all apps published are compliant with the Developer Distribution Agreement and Content Policy. If you have questions or concerns, please contact our support team through the Google Play Developer Help Center.
Android小白,看了Webview avoid security alert from google play upon implementation of onReceivedSslError这个还是找不到自己工程中的这个function onReceivedSslError


求各位指点一二:2:

参考这个blog.

这个不是openssl的问题吧,这是webviewclient 的onReceivedSslError处理方式不对

hello,我们也遇到了这个问题,我已经修了三次了还是报这个安全提醒,你怎么处理的?

我搜遍整个工程,还是找不到onReceivedSslError这个方法,但是谷歌就是说这个问题,真的很无语,已经被拒三天了,哎,你现在解决了吗?

今天刚将curl升级到1.0.1T 也碰到了同样的警告被拒…我的版本是2.2.5…

我搜索了引擎代码没找到onReceivedSslError 。我也觉得很奇怪这个警告是怎么来的。