Skip to content

Config for Security

Jason Wyatt Feinstein edited this page May 5, 2016 · 1 revision

It is not recommended that you include Android-DebugPort in your app's release binary. Follow the steps below to ensure that it's not possible for nefarious people to start the server in production:

Rather than using the compile operation in your app's build.gradle file, use debugCompile. To make sure your app builds for production, you can also include the no-op version of Android-DebugPort

dependencies {
    debugCompile 'com.github.jasonwyatt:Android-DebugPort:X.X.X'
    testCompile 'com.github.jasonwyatt:Android-DebugPort:X.X.X'
    releaseCompile 'com.github.jasonwyatt:Android-DebugPort-NOOP:X.X.X'
    // -- your other dependencies
}

Note: Be sure you've also included Jitpack.io in your project's top-level build.gradle file:

allprojects {
    repositories {
        jcenter()
        maven { url "https://jitpack.io" }
    }
}
Clone this wiki locally