String Obfuscation

Attackers can perform static analysis of the application by unpacking the application and decompiling its DEX bytecode. String constants are then clearly visible in the decompiled code.

This feature obfuscates string constants in the DEX bytecode. The string constants are then not readable in the decompiled code. String obfuscation makes a static analysis of the app more difficult.

Configuration

The feature can be enabled by the following setting in the configuration YAML file (see Configuration).

stringObfuscation:
  enabled: true