LukeMackin b88311a2d0 security: Bridge代理fetch+移除跨域设置+CSP头限制 ...

CRITICAL修复:
- 移除allowFileAccessFromFileURLs/allowUniversalAccessFromFileURLs
- 移除mixedContentMode=ALWAYS_ALLOW
- WebViewClient注入CSP: default-src 'none';script-src 'unsafe-inline';connect-src 'none'
- 新增Bridge.fetchManifest(channel)/Bridge.fetchText(path)原生HTTP代理
- manifest JSON + version.txt通过Bridge读取,无需WebView跨域

2026-07-21 23:02:00 +08:00

..

.gradle

security: Bridge代理fetch+移除跨域设置+CSP头限制

2026-07-21 23:02:00 +08:00

app

security: Bridge代理fetch+移除跨域设置+CSP头限制

2026-07-21 23:02:00 +08:00

gradle

feat: H5热更新 v6→v7 — 远端version.txt=v7 + index-v7.html

2026-07-21 15:00:59 +08:00

init.gradle.d

feat: H5热更新 v6→v7 — 远端version.txt=v7 + index-v7.html

2026-07-21 15:00:59 +08:00

build.gradle

feat: H5热更新 v6→v7 — 远端version.txt=v7 + index-v7.html

2026-07-21 15:00:59 +08:00

gradle.properties

build(android): 生成原生Android工程 — Android Studio直接构建

2026-07-19 10:42:17 +08:00

gradlew.bat

build(android): APK构建成功 — 纯原生OTA测试App

2026-07-19 10:55:51 +08:00

settings.gradle

feat: H5热更新 v6→v7 — 远端version.txt=v7 + index-v7.html

2026-07-21 15:00:59 +08:00