The Keys are getting leaked in the Strings.xml file. Is there any way to store the keys in some other files and use the values in Strings.xml?

Question

<resources>
  <string name="app_name">Test App</string>
  <string 
    moduleConfig="true" 
    name="CodePushDeploymentKey">
    PUT-YOUR-DEPLOYMENT-KEY-HERE
  </string>
</resources>

This is the sample code for the String.xml file where I am storing the key for my React Native app for CodePush.

When I run the app through Vulnerability test, it showed that the keys are getting leaked from the Strings.xml file. So is there any other way to store the files rather than in Strings.xml ? Or how can we prevent the key values from getting leaked from Strings.xml file ?

Answer 1

Storing it in an .env file will ensure reliability.

For more information.

Answer link