High Debug mode enabled

Description

The application is compiled with debug mode allowing attackers to attach a debugger to access sensitive data or perform malicious actions.Attacker can debug the application without access to source code and leverage it to perform malicious actions on behalf ot the user, modify the application behavior or access sensitive data like credentials and session cookies.

Recommendation

Disable debug mode by setting the attribute android:debuggeable to false in the application tag.


    <application android:icon="@drawable/icon" android:debuggable="false">

Technical details
<?xml version="1.0" ?>
<manifest android:hardwareAccelerated="true" android:versionCode="10000" android:versionName="1.0.0" package="com.cordova.footsteps" platformBuildVersionCode="25" platformBuildVersionName="7.1.1" xmlns:android="http://schemas.android.com/apk/res/android">
	

	<uses-sdk android:minSdkVersion="16" android:targetSdkVersion="25">
</uses-sdk>
	

	<supports-screens android:anyDensity="true" android:largeScreens="true" android:normalScreens="true" android:resizeable="true" android:smallScreens="true" android:xlargeScreens="true">
</supports-screens>
	

	<uses-permission android:name="android.permission.INTERNET">
</uses-permission>
	

	<uses-permission android:name="android.permission.ACCESS_COARSE_LOCATION">
</uses-permission>
	

	<uses-permission android:name="android.permission.ACCESS_FINE_LOCATION">
</uses-permission>
	

	<uses-feature android:name="android.hardware.location.gps">
</uses-feature>
	

	<application android:debuggable="true" android:hardwareAccelerated="true" android:icon="@7F030000" android:label="@7F050001" android:supportsRtl="true">
		

		<activity android:configChanges="0x000004B4" android:label="@7F050000" android:launchMode="1" android:name="com.cordova.footsteps.MainActivity" android:theme="@android:01030129" android:windowSoftInputMode="0x00000010">
			

			<intent-filter android:label="@7F050002">
				

				<action android:name="android.intent.action.MAIN">
</action>
				

				<category android:name="android.intent.category.LAUNCHER">
</category>
				

			</intent-filter>
			

		</activity>
		

	</application>
	

</manifest>