LukeMackin
|
490201f0d4
|
fix: 审查阻断—移除MainApplication引用+cleartext+SYSTEM_ALERT_WINDOW
|
2026-07-22 19:37:51 +08:00 |
|
LukeMackin
|
ffb74262e9
|
chore: 移除expo-updates依赖+清理BOM
|
2026-07-22 18:25:20 +08:00 |
|
LukeMackin
|
09fde0501f
|
fix: 审查修复—cleartext+package.json main+dead HTML+comment
|
2026-07-22 18:21:42 +08:00 |
|
LukeMackin
|
74619a2713
|
fix(android): 安全修复 — SHA256原生层计算+TOCTOU+域名白名单
- PackageInstallerModule: DigestInputStream边写边算SHA256, 原生层校验消除TOCTOU
- updater: remove expo-crypto, add download domain whitelist, 错误消息去敏感路径
- package.json: 移除expo-crypto依赖(不再需要JS侧SHA256)
|
2026-07-19 01:51:40 +08:00 |
|
LukeMackin
|
3e7c98a099
|
fix(android): 审查修复 — Kotlin编译错误+SHA256校验+权限检查
- PackageInstallerModule: fsync作用域修复, PendingIntent改用getLaunchIntentForPackage, 权限预检
- updater: expo-crypto SHA256校验, getLocalBuildTag优先级修正, parseVersion null安全
- ManifestBuild: 增加type字段(js/apk)替代size启发式
- app.json: fallbackToCacheTimeout 0→3000
- shared: catch静默→console.warn
|
2026-07-19 01:48:00 +08:00 |
|
LukeMackin
|
9f8659c293
|
feat(android): OTA双轨更新 — shared版本号+Android Expo/PackageInstaller
- packages/shared: 版本号解析 vX.Y.Z-dav-{client}-{build} + manifest远程检查
- packages/client-android: Expo52 + expo-updates JS bundle OTA
- PackageInstallerModule.kt: APK静默安装原生模块（~60行Kotlin）
- monorepo: pnpm workspace + 版本号体系
|
2026-07-19 01:41:36 +08:00 |
|