Skip to content

Security & Privacy

Facebook SDK debug mode enabled

Description

The application is compiled with Facebook SDK debug mode FacebookSdk.setIsDebugEnabled enabled. The debug logs contain detailed requests and JSON responses, which might expose sensitive information.

Recommendation

Disable debug logs before deploying your app to the public.

FacebookSdk.setIsDebugEnabled(false);

Detect this with Ostorlab

Ostorlab checks Android and iOS apps for this issue.

Scan your app free

Standards

  • OWASP_MASVS_L1:
    • MSTG_CODE_2
    • MSTG_CODE_4
  • OWASP_MASVS_L2:
    • MSTG_CODE_2
    • MSTG_CODE_4
  • PCI_STANDARDS:
    • REQ_2_2
    • REQ_6_2
  • OWASP_MASVS_v2_1:
    • MASVS_RESILIENCE_3
  • HIPAA_CONTROLS:
    • SECURITY212
    • SECURITY213
    • SECURITY255
  • OWASP_MOBILE_TOP_10:
    • M8_2024