- 22 Jan 2025
- 1 Minute à lire
- SombreLumière
- PDF
Exit URL launching
- Mis à jour le 22 Jan 2025
- 1 Minute à lire
- SombreLumière
- PDF
If App Shielding shuts down the application due to a configured policy, a web browser can be launched with a preconfigured URL to explain the problem to the user. If no URL is configured, the web browser is not invoked.
This exit URL can use variable placeholders that are substituted by App Shielding to provide information inside the URL itself.
The following variable substitutions are available:
Android variable substitutions of the URL | ||
Placeholder | Configuration | Substitution |
---|---|---|
%REASON% | -- | The reason of the shutdown as a decimal code. The meaning of this value is documented in List of shutdown reasons. |
%MANUFACTURER% | -- | The device manufacturer. |
%MODEL% | -- | The device model name. |
%ANDROID% | -- | The Android API level of the device. |
%VERSION% | -- | The App Shielding version. |
%ROOT% | exitOnRootingURL | A 4-byte hex value that gives more information about the rooting detected by App Shielding. The first two bytes are the boolean rooting detection value and the heuristics detection value. These values are somewhat obfuscated to make it harder for attackers to use them when trying to circumvent App Shielding. To recover the boolean detection value, subtract 0x3F from the first byte (note that you have to work on 8-bit unsigned integers). To recover the heuristics value, xor the second byte with the first byte and then subtract 0xEA (again, using 8-bit unsigned integers). The last two bytes provide more information about how the rooting was detected. Please supply this value to OneSpan to help diagnosing a problem. |
%KEYBOARD% | exitOnUntrustedKeyboardURL | The package name of the untrusted keyboard. |
%KEYBOARDNAME% | exitOnUntrustedKeyboardURL | The name of the untrusted keyboard. |
%KEYBOARDVERSION% | exitOnUntrustedKeyboardURL | The version of the untrusted keyboard. |
%KEYBOARDSIGNER% | exitOnUntrustedKeyboardURL | The subject of the signing certificate used to sign the untrusted keyboard. |
%KEYBOARDSIGNATURE% | exitOnUntrustedKeyboardURL | The value of the signing certificate used to sign the untrusted keyboard. |
%SCREENREADER% | exitOnUntrustedScreenreadersURL | The package name of the untrusted screen reader. |
%SCREENREADERNAME% | exitOnUntrustedScreenreadersURL | The name of the untrusted screen reader. |
%SCREENREADERVERSION% | exitOnUntrustedScreenreadersURL | The version of the untrusted screen reader. |
%SCREENREADERSIGNER% | exitOnUntrustedScreenreadersURL | The subject of the signing certificate used to sign the untrusted screen reader. |
%SCREENREADERSIGNATURE% | exitOnUntrustedScreenreadersURL | The value of the signing certificate used to sign the untrusted screen reader. |
%VIRTUALSPACEAPP% | exitOnAppInVirtualSpaceURL | The package name of the untrusted virtual space app. |
%VIRTUALSPACEAPPNAME% | exitOnAppInVirtualSpaceURL | The name of the untrusted virtual space app. |
%VIRTUALSPACEAPPVERSION% | exitOnAppInVirtualSpaceURL | The version of the untrusted virtual space app. |
%VIRTUALSPACEAPPSIGNER% | exitOnAppInVirtualSpaceURL | The subject of the signing certificate used to sign the untrusted virtual space app. |
%VIRTUALSPACEAPPSIGNATURE% | exitOnAppInVirtualSpaceURL | The value of the signing certificate used to sign the untrusted virtual space app. |
%HOOKINGFRAMEWORKS% | exitOnHookingFrameworksURL | A 1-byte hex value that provides information about how the hooking framework was detected. Please supply this value to OneSpan to help diagnosing a problem. |
<exitOnRootingURL v="https://www.example.com?reason=%REASON%&manufacturer=%MANUFACTURER%&model=%MODEL%&android=%ANDROID%&version=%VERSION%&root=%ROOT%" />