Hardcoded BASE_URL causing weird requests

[ghost]

We have some monitoring at Learning Machine that blocks weird request and one we are noticing is coming from the android wallet. In some cases it seems to make a request to learning machine looking for an issuer profile. We have yet to reproduce this or locate the exact place it is coming from, but we've done a little checking.

There is a hardcoded reference to learning machine here:

wallet-android/LearningMachine/app/src/main/java/com/learningmachine/android/app/LMConstants.java

Line 12 in 89b4f1e

public static final String BASE_URL = "https://certificates.learningmachine.com";

And it's being injected somewhere from here:

wallet-android/LearningMachine/app/src/main/java/com/learningmachine/android/app/data/inject/ApiModule.java

Line 76 in 1ac0820

Retrofit provideIssuerRetrofit(@Named("issuer") OkHttpClient okHttpClient) {

I'm unfamiliar with this code base or how android injection works. We also haven't had any reports of this yet so it's TBD whether it's actually user facing.