Despite the seemingly overwhelming number of problems Uber is facing over the safety and legality of its services, the company remains focused on expanding its user base. Amidst all the doom and gloom of the last few weeks, Uber’s just popped out an announcement that it’s teaming up with Sprint to pre-install its app on “most” of its new Android phones.

Sprint hasn’t said exactly which devices will have the app installed but we assume that most of its newer models will do so. In addition, Sprint customers will be entitled to a free $20 ride when they first sign up, while those who don’t have the app pre-installed will be able to download it via the “Sprint Zone” app and get their hands on the free ride.

Uber already has a similar partnership in place with AT&T, and so it’s logical the company would want to find more partners. In that case, Sprint is an obvious choice, considering the excessive amount of “bloatware” (pre-installed apps) it already has on its phones.

These kinds of partnerships aren’t the only way Uber is trying to expand its reach. Earlier this year it teamed up with Google to make it possible to hail an Uber ride directly from its Google Maps app on Android and iOS devices.

Meanwhile, in what seems to be a rare day of positive news for Uber, the company has confirmed its fixed a potentially nasty XSS vulnerability found on its website. The Register reports the bug could leave site visitors at risk of being compromised via the theft of their authentication credentials, browser histories, personal details and cookies.

“Cross-site scripting (XSS) problems make it possible to introduce arbitrary content under the control of hackers while presenting it as if it had originated from the original website, opening up the door to more convincing phishing scams and worse in the process,” noted The Register.

The good news is this flaw has now been fixed, and according to Uber, “There are no vulnerabilities/risk” on its website anymore.

Image credit: Uber.com