Security News
PyPI’s New Archival Feature Closes a Major Security Gap
PyPI now allows maintainers to archive projects, improving security and helping users make informed decisions about their dependencies.
com.facebook.stetho:stetho
Advanced tools
Stetho is a sophisticated debug bridge for Android applications. When enabled,
developers have access to the Chrome Developer Tools feature natively part of
the Chrome desktop browser. Developers can also choose to enable the optional
dumpapp
tool which offers a powerful command-line interface to application
internals.
Once you complete the set-up instructions below, just start your app and point
your laptop browser to chrome://inspect
. Click the "Inspect" button to
begin.
Download the latest JARs or grab via Gradle:
implementation 'com.facebook.stetho:stetho:1.6.0'
or Maven:
<dependency>
<groupId>com.facebook.stetho</groupId>
<artifactId>stetho</artifactId>
<version>1.6.0</version>
</dependency>
Only the main stetho
dependency is strictly required; however, you may also wish to use one of the network helpers:
implementation 'com.facebook.stetho:stetho-okhttp3:1.6.0'
or:
implementation 'com.facebook.stetho:stetho-urlconnection:1.6.0'
You can also enable a JavaScript console with:
implementation 'com.facebook.stetho:stetho-js-rhino:1.6.0'
For more details on how to customize the JavaScript runtime see stetho-js-rhino.
Integrating with Stetho is intended to be seamless and straightforward for
most existing Android applications. There is a simple initialization step
which occurs in your Application
class:
public class MyApplication extends Application {
public void onCreate() {
super.onCreate();
Stetho.initializeWithDefaults(this);
}
}
Also ensure that your MyApplication
Java class is registered in your AndroidManifest.xml
file, otherwise you will not see an "Inspect" button in chrome://inspect/#devices
:
<manifest
xmlns:android="http://schemas.android.com/apk/res/android"
...>
<application
android:name="MyApplication"
...>
</application>
</manifest>
This brings up most of the default configuration but does not enable some additional hooks (most notably, network inspection). See below for specific details on individual subsystems.
If you are using the popular OkHttp library at the 3.x release, you can use the Interceptors system to automatically hook into your existing stack. This is currently the simplest and most straightforward way to enable network inspection:
new OkHttpClient.Builder()
.addNetworkInterceptor(new StethoInterceptor())
.build()
Note that okhttp 2.x will work as well, but with slightly different syntax and you must use the stetho-okhttp
artifact (not stetho-okhttp3
).
As interceptors can modify the request and response, add the Stetho interceptor after all others to get an accurate view of the network traffic.
If you are using HttpURLConnection
, you can use StethoURLConnectionManager
to assist with integration though you should be aware that there are some
caveats with this approach. In particular, you must explicitly add
Accept-Encoding: gzip
to the request headers and manually handle compressed
responses in order for Stetho to report compressed payload sizes.
See the stetho-sample
project for more details.
Custom plugins are the preferred means of extending the dumpapp
system and
can be added easily during configuration. Simply replace your configuration
step as such:
Stetho.initialize(Stetho.newInitializerBuilder(context)
.enableDumpapp(new DumperPluginsProvider() {
@Override
public Iterable<DumperPlugin> get() {
return new Stetho.DefaultDumperPluginsBuilder(context)
.provide(new MyDumperPlugin())
.finish();
}
})
.enableWebKitInspector(Stetho.defaultInspectorModulesProvider(context))
.build())
See the stetho-sample
project for more details.
See the CONTRIBUTING.md file for how to help out.
Stetho is MIT-licensed. See LICENSE file for more details.
FAQs
Stetho Debugging Platform for Android
We found that com.facebook.stetho:stetho demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
PyPI now allows maintainers to archive projects, improving security and helping users make informed decisions about their dependencies.
Research
Security News
Malicious npm package postcss-optimizer delivers BeaverTail malware, targeting developer systems; similarities to past campaigns suggest a North Korean connection.
Security News
CISA's KEV data is now on GitHub, offering easier access, API integration, commit history tracking, and automated updates for security teams and researchers.