> For the complete documentation index, see [llms.txt](https://blog.s1rn3tz.ovh/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://blog.s1rn3tz.ovh/pentest-mobile/android/stockage-de-donnees-non-securise/strings.md).

# Strings

le fichier `res/values/strings.xml`  dans un apk contient les chaînes littérales de l'application. Il arrive ainsi parfois que des secrets y soit stockés en clair.

```xml
<resources>
    <string name="app_name">App</string>
    <string name="hello_world">Hello world!</string>
    <string name="action_settings">Settings</string>
    <string name="secret_key">My_Secret_Key</string>
 </resources>
```