不能混淆的項(xiàng)
在AndroidManifest中配置的類萌朱,比如四大組件
JNI調(diào)用的方法
反射用到的類
WebView中JavaScript調(diào)用的方法
Layout文件引用到的自定義View
一些引入的第三方庫(kù)
使用工具AndroidStudio
release {
minifyEnabled true
proguardFiles getDefaultProguardFile('proguard-android.txt'), 'proguard-rules.pro'
}
使用proguard混淆代碼是對(duì)產(chǎn)品本身的一種保護(hù)采桃,常見(jiàn)的方法就是編寫projuard-rules.pro配置文件
# This is a configuration file for ProGuard.
# http://proguard.sourceforge.net/index.html#manual/usage.html
//混淆時(shí)不使用大小寫混合類名
-dontusemixedcaseclassnames
//不跳過(guò)library中的非public的類
-dontskipnonpubliclibraryclasses
//打印混淆的詳細(xì)信息
-verbose
# Optimization is turned off by default. Dex does not like code run
# through the ProGuard optimize and preverify steps (and performs some
# of these optimizations on its own).
//不進(jìn)行優(yōu)化哆档,建議使用此選項(xiàng)睛琳,理由見(jiàn)上
-dontoptimize
//不進(jìn)行預(yù)校驗(yàn)汇四,預(yù)校驗(yàn)是作用在Java平臺(tái)上的,Android平臺(tái)上不需要這項(xiàng)功能咐柜,去掉之后還可以加快混淆速度
-dontpreverify
# Note that if you want to enable optimization, you cannot just
# include optimization flags in your own project configuration file;
# instead you will need to point to the
# "proguard-android-optimize.txt" file instead of this one from your
# project.properties file.
//保留注解參數(shù)
-keepattributes *Annotation*
//保留Google原生服務(wù)需要的類
-keep public class com.google.vending.licensing.ILicensingService
-keep public class com.android.vending.licensing.ILicensingService
# For native methods, see http://proguard.sourceforge.net/manual/examples.html#native
//保留native方法的類名和方法名
-keepclasseswithmembernames class * {
native <methods>;
}
# keep setters in Views so that animations can still work.
# see http://proguard.sourceforge.net/manual/examples.html#beans
//保留自定義View,如"屬性動(dòng)畫"中的set/get方法
-keepclassmembers public class * extends android.view.View {
void set*(***);
*** get*();
}
# We want to keep methods in Activity that could be used in the XML attribute onClick
//保留Activity中參數(shù)是View的方法兼蜈,如XML中配置android:onClick=”buttonClick”屬性,Activity中調(diào)用的buttonClick(View view)方法
-keepclassmembers class * extends android.app.Activity {
public void *(android.view.View);
}
# For enumeration classes, see http://proguard.sourceforge.net/manual/examples.html#enumerations
//保留混淆枚舉中的values()和valueOf()方法
-keepclassmembers enum * {
public static **[] values();
public static ** valueOf(java.lang.String);
}
//Parcelable實(shí)現(xiàn)類中的CREATOR字段是絕對(duì)不能改變的拙友,包括大小寫
-keepclassmembers class * implements android.os.Parcelable {
public static final android.os.Parcelable$Creator CREATOR;
}
//R文件中的所有記錄資源id的靜態(tài)字段
-keepclassmembers class **.R$* {
public static <fields>;
}
# The support library contains references to newer platform versions.
# Dont warn about those in case this app is linking against an older
# platform version. We know about them, and they are safe.
//忽略support包因?yàn)榘姹炯嫒莓a(chǎn)生的警告
-dontwarn android.support.**
Proguard關(guān)鍵字
關(guān)鍵字 描述
keep 保留類和類中的成員为狸,防止被混淆或移除
keepnames 保留類和類中的成員,防止被混淆遗契,成員沒(méi)有被引用會(huì)被移除
keepclassmembers 只保留類中的成員辐棒,防止被混淆或移除
keepclassmembernames 只保留類中的成員,防止被混淆牍蜂,成員沒(méi)有引用會(huì)被移除
keepclasseswithmembers 保留類和類中的成員漾根,防止被混淆或移除,保留指明的成員
keepclasseswithmembernames 保留類和類中的成員鲫竞,防止被混淆辐怕,保留指明的成員,成員沒(méi)有引用會(huì)被移除
Proguard通配符
通配符 描述
<field> 匹配類中的所有字段
<method> 匹配類中所有的方法
<init> 匹配類中所有的構(gòu)造函數(shù)
* 匹配任意長(zhǎng)度字符从绘,不包含包名分隔符(.)
** 匹配任意長(zhǎng)度字符寄疏,包含包名分隔符(.)
*** 匹配任意參數(shù)類型
...
指定混淆時(shí)可使用字典
-applymapping filename 指定重用一個(gè)已經(jīng)寫好了的map文件作為新舊元素名的映射。
-obfuscationdictionary filename 指定一個(gè)文本文件用來(lái)生成混淆后的名字僵井。
-classobfuscationdictionary filename 指定一個(gè)混淆類名的字典
-packageobfuscationdictionary filename 指定一個(gè)混淆包名的字典
-overloadaggressively 混淆的時(shí)候大量使用重載赁还,多個(gè)方法名使用同一個(gè)混淆名(慎用)
# 這里巧妙地使用java中的關(guān)鍵字作字典,混淆之后的代碼更加不利于閱讀
#
# This obfuscation dictionary contains reserved Java keywords. They can't
# be used in Java source files, but they can be used in compiled class files.
# Note that this hardly improves the obfuscation. Decent decompilers can
# automatically replace reserved keywords, and the effect can fairly simply be
# undone by obfuscating again with simpler names.
# Usage:
# java -jar proguard.jar ..... -obfuscationdictionary keywords.txt
#
do
if
for
int
new
try
byte
case
char
else
goto
long
this
void
break
catch
class
const
final
float
short
super
throw
while
double
import
native
public
return
static
switch
throws
boolean
default
extends
finally
package
private
abstract
continue
strictfp
volatile
interface
protected
transient
implements
instanceof
synchronized
使用proguardgui對(duì)jar包進(jìn)行混淆
proguardgui工具支持Shrinking(壓縮)驹沿、Optimization(優(yōu)化)、Obfuscation(混淆)蹈胡、Preverification(預(yù)校驗(yàn))四項(xiàng)操作
詳細(xì)步驟:
1 Load configuration --> Next
2 Add input/Add output
3 添加jar包依賴
JAVA_HOME/jre/lib/rt.jar
Android_SDK/platfroms/android-23/android.jar
AndroidStudioProjects/ProjectName/app/build/intermediates/exploded-aar/com.android.support/appcompat-v7/23.4.0/jars/classes.jar
AndroidStudioProjects/ProjectName/app/build/intermediates/exploded-aar/com.android.support/support-v4/23.4.0/jars/classes.jar
AndroidStudioProjects/ProjectName/app/build/intermediates/exploded-aar/com.android.support/support-v4/23.4.0/jars/libs/internal_impl-23.4.0.jar
其他第三方j(luò)ar文件
4 Don`t use Shrink --> Next
5 Add --> Extends/implements class --> android.app.Activity --> ok --> Next
6 Next
7 Next
8 View configuration
tips:
AndroidStudio中生成jar文件方法:
jar -cvf filename.jar -C app/build/intermediates/classes/debug
5分鐘快速混淆
#-------------------------------------------定制化區(qū)域----------------------------------------------
#---------------------------------1.實(shí)體類---------------------------------
-keep class com.demo.login.bean.** { *; }
-keep class com.demo.main.bean.** { *; }
#-------------------------------------------------------------------------
#---------------------------------2.第三方包-------------------------------
#eventBus
-keepattributes *Annotation*
-keepclassmembers class ** {
@org.greenrobot.eventbus.Subscribe <methods>;
}
-keep enum org.greenrobot.eventbus.ThreadMode { *; }
-keepclassmembers class * extends org.greenrobot.eventbus.util.ThrowableFailureEvent {
<init>(java.lang.Throwable);
}
#glide
-keep public class * implements com.bumptech.glide.module.GlideModule
-keep public enum com.bumptech.glide.load.resource.bitmap.ImageHeaderParser$** {
**[] $VALUES;
public *;
}
#log4j
-libraryjars log4j-1.2.17.jar
-dontwarn org.apache.log4j.**
-keep class org.apache.log4j.** { *;}
#-------------------------------------------------------------------------
#---------------------------------3.與js互相調(diào)用的類------------------------
-keepclasseswithmembers class com.demo.login.bean.ui.MainActivity$JSInterface {
<methods>;
}
#-------------------------------------------------------------------------
#---------------------------------4.反射相關(guān)的類和方法-----------------------
# 有
#----------------------------------------------------------------------------
#---------------------------------------------------------------------------------------------------
#-------------------------------------------基本不用動(dòng)區(qū)域--------------------------------------------
#---------------------------------基本指令區(qū)----------------------------------
-optimizationpasses 5
-dontusemixedcaseclassnames
-dontskipnonpubliclibraryclasses
-dontskipnonpubliclibraryclassmembers
-dontpreverify
-verbose
-printmapping proguardMapping.txt
-optimizations !code/simplification/cast,!field/*,!class/merging/*
-keepattributes *Annotation*,InnerClasses
-keepattributes Signature
-keepattributes SourceFile,LineNumberTable
#----------------------------------------------------------------------------
#---------------------------------默認(rèn)保留區(qū)---------------------------------
-keep public class * extends android.app.Activity
-keep public class * extends android.app.Application
-keep public class * extends android.app.Service
-keep public class * extends android.content.BroadcastReceiver
-keep public class * extends android.content.ContentProvider
-keep public class * extends android.app.backup.BackupAgentHelper
-keep public class * extends android.preference.Preference
-keep public class * extends android.view.View
-keep public class com.android.vending.licensing.ILicensingService
-keep class android.support.** {*;}
-keepclasseswithmembernames class * {
native <methods>;
}
-keepclassmembers class * extends android.app.Activity{
public void *(android.view.View);
}
-keepclassmembers enum * {
public static **[] values();
public static ** valueOf(java.lang.String);
}
-keep public class * extends android.view.View{
*** get*();
void set*(***);
public <init>(android.content.Context);
public <init>(android.content.Context, android.util.AttributeSet);
public <init>(android.content.Context, android.util.AttributeSet, int);
}
-keepclasseswithmembers class * {
public <init>(android.content.Context, android.util.AttributeSet);
public <init>(android.content.Context, android.util.AttributeSet, int);
}
-keep class * implements android.os.Parcelable {
public static final android.os.Parcelable$Creator *;
}
-keepclassmembers class * implements java.io.Serializable {
static final long serialVersionUID;
private static final java.io.ObjectStreamField[] serialPersistentFields;
private void writeObject(java.io.ObjectOutputStream);
private void readObject(java.io.ObjectInputStream);
java.lang.Object writeReplace();
java.lang.Object readResolve();
}
-keep class **.R$* {
*;
}
-keepclassmembers class * {
void *(**On*Event);
}
#----------------------------------------------------------------------------
#---------------------------------webview------------------------------------
-keepclassmembers class fqcn.of.javascript.interface.for.Webview {
public *;
}
-keepclassmembers class * extends android.webkit.WebViewClient {
public void *(android.webkit.WebView, java.lang.String, android.graphics.Bitmap);
public boolean *(android.webkit.WebView, java.lang.String);
}
-keepclassmembers class * extends android.webkit.WebViewClient {
public void *(android.webkit.WebView, jav.lang.String);
}
#----------------------------------------------------------------------------
#---------------------------------------------------------------------------------------------------
# 刪除代碼中Log相關(guān)的代碼
-assumenosideeffects class android.util.Log {
public static boolean isLoggable(java.lang.String, int);
public static int v(...);
public static int i(...);
public static int w(...);
public static int d(...);
public static int e(...);
}
網(wǎng)上有很多5分鐘完成混淆規(guī)則的教程渊季,但如何更優(yōu)雅的完成這一枯燥的過(guò)程朋蔫,即使用@Keep注解,使混淆變得輕松愉快
在proguard-rules.pro配置文件中加入以下規(guī)則
#手動(dòng)啟用support keep注解
#http://tools.android.com/tech-docs/support-annotations
-dontskipnonpubliclibraryclassmembers
-printconfiguration
-keep,allowobfuscation @interface android.support.annotation.Keep
-keep @android.support.annotation.Keep class *
-keepclassmembers class * {
@android.support.annotation.Keep *;
}
哪里不對(duì)@Keep哪里却汉,媽媽再也不用擔(dān)心我不會(huì)混淆啦……
參考資料
http://blog.csdn.net/guolin_blog/article/details/50451259
http://www.reibang.com/p/60e82aafcfd0