String Obfuscation

String constants in the application code are readable after the application is decompiled, which makes static analysis easier. In-App Protection Shielder for Android is able to obfuscate the string constants in the application code, so that they are not readable in the decompiled code.

Configuration

string_obfuscation:
  enabled: true

String obfuscation is disabled by default.

Excluded Packages and Classes

By default, the following packages are excluded from obfuscation:

• android
• androidx
• kotlin
• kotlinx
• org.jetbrains

Set exclude_default_packages: false to include them.

Additional packages and classes can be excluded:

string_obfuscation:
  enabled: true
  exclude:
    packages:
      - com.example.thirdparty
    classes:
      - com.example.api.ApiConstants
      - com.example.api.ApiConstants$Keys

• packages excludes the packages and all their subpackages. Wildcards such as .* are not supported.
• classes excludes fully qualified classes by exact match. Inner classes are listed separately.

Read Next

• Release Notes