代码扫描，sdk有漏洞

[yaok]

|程序中的Webview组件使用了loadDataWithBaseUrl，且允许加载来自方法外部的baseUrl或data，存在安全风险。危险级别：高。
|程序中的Webview组件允许访问Content URL，可能导致本地数据泄露风险。危险级别：高
|High|com/twitter/sdk/android/core/identity/OAuthController.java|OAuthController.setUpWebView(WebView, WebViewClient, String, WebChromeClient) : void|

请问下个版本会修复吗，泄漏会影响app信息吗

[yaok]

Why no one answered the question

[IgorBrigadir]

You’re more likely to get an answer in English on these forums, or if it’s an issue with the SDK itself maybe https://github.com/twitter/twitter-kit-android/issues

[LeBraat]

Our team may not always be able to answer a question quickly. We have different schedules and sometimes it may take a few days, especially around the US holiday season. Thanks for your patience! This is a community forum, not a direct channel to technical support.

Please make sure to review this post to read up on the latest news related to Twitter Kit.