Releases: Tianshang301/TianshangGuard
Releases · Tianshang301/TianshangGuard
Release list
v1.5.0 — QuishGuard QR码拦截 + Model v5
TianshangGuard v1.5.0 (Unified / 统一版)
Release Date / 发布日期: 2026-07-26
Package / 包名: com.tianshang.guard
Language / 语言: Auto-detect with manual switch / 支持手动切换语言
Version / 版本号: versionCode=12, versionName=1.5.0
New Features / 新增功能
- QuishGuard: Built-in QR code scanner with VPN DNS dual-layer phishing blocking / 内置 QR 码扫码器 + VPN DNS 双层钓鱼拦截
- Web3Guard: Blockchain domain detection (pure rule-based, zero ML dependency) / 区块链域名检测（纯规则，零 ML 依赖）
- Quick Settings Tile for QR scanning shortcut / Quick Settings Tile 扫码快捷入口
Model Improvements / 模型改进
- SMS v5: 30-epoch training, val loss=0.026, val acc=91.2%, ONNX test 8/10=80%
- Threshold 0.59: Recall=92.9%, FPR=8.7%, F1=0.9206 (on 885 real SMS validation set)
- RiskLevel thresholds: SAFE<0.30, SUSPICIOUS<0.59, DANGEROUS≥0.59
Infrastructure / 基础设施
- SQLCipher database encryption / 数据库加密
- DNS over HTTPS (DoH) with UDP fallback / DNS over HTTPS + UDP 降级
- SHA-256 rule integrity verification / 规则完整性校验
- DAO suspend refactoring + v1→v4 database migration / DAO suspend 改造 + 数据库迁移
- AppModule split into domain-specific modules / AppModule 按领域拆分
Build Info / 构建信息
- Build / 构建: SUCCESS
- APK / 安装包: app-unified-release.apk (27.9 MB)
v1.4.2-unified
TianshangGuard v1.4.2 (Unified / 统一版)
Release Date / 发布日期: 2026-06-30
Package / 包名: com.tianshang.guard
Language / 语言: Auto-detect with manual switch / 支持手动切换语言
Version / 版本号: versionCode=11, versionName=1.4.2-unified
Fixes / 修复
- Fix language switch requiring double-click (recreate after async write completes) / 修复切换语言需点击两次的问题
- SQLCipher loadLibs startup crash fix / 修复 SQLCipher 原生库启动崩溃
Build Info / 构建信息
- Build / 构建: SUCCESS
Models / 模型
- Chinese & English SMS phishing detection / 支持中英文短信钓鱼检测
- URL phishing detection / URL 钓鱼检测
- DNS protection / DNS 防护
v1.4.2-english
TianshangGuard v1.4.2 (English)
Release Date: 2026-06-30
Package: com.tianshang.guard.en
Version: versionCode=11, versionName=1.4.2-en
Fixes
- Fix language switch requiring double-click (recreate after async write completes)
- SQLCipher loadLibs startup crash fix
Build Info
- Build: SUCCESS
v1.4.2-chinese
TianshangGuard v1.4.2（中文版）
发布日期: 2026-06-30
包名: com.tianshang.guard.zh
版本号: versionCode=11, versionName=1.4.2-zh
修复
- 修复切换语言需点击两次的问题（setLanguage 异步写入完成后再 recreate）
- SQLCipher loadLibs 崩溃修复
构建信息
- Build: SUCCESS
v1.4.0-unified
TianshangGuard v1.4.0 (Unified / 统一版)
Release Date / 发布日期: 2026-06-28
Package / 包名: com.tianshang.guard
Language / 语言: Auto-detect with manual switch / 支持手动切换语言
Version / 版本号: versionCode=9, versionName=1.4.0-unified
New Feature / 新功能
Language Switching / 语言切换
This version supports language switching in Settings:
- Follow System (default) — follows device language
- 简体中文 — Chinese UI
- English — English UI
本版本支持在设置中切换语言：
- 跟随系统（默认）— 跟随设备语言
- 简体中文 — 中文界面
- English — 英文界面
Note: Language switch is only available in Unified version. zh/en versions remain fixed to their respective languages.
注意：语言切换仅在 Unified 版本可用，zh/en 版本固定使用对应语言。
Security Audit Fixes / 安全审计修复 (38 vulnerabilities)
Critical (4)
- SQL injection: EncryptedDatabaseProvider sanitization
- Buffer overflow: DnsPacketHandler bounds check
- Response truncation: GuardVpnService remaining()
- UTF-8 truncation: ByteTokenizer safe truncation
High (13)
- Race conditions, thread safety, resource leaks, memory leaks, certificate pinning, whitelist bypass
Medium (14)
- Visibility, IP regex, signature bypass, log sanitization, TTL expiry
Low (7)
- Integer overflow, regex reuse, clear() fix
Build Info / 构建信息
- Build / 构建: SUCCESS
- Real device test / 真机测试: PASS
Download / 下载
- TianshangGuard-v1.4.0-unified.apk — 支持语言切换 / Language switching supported
- Chinese & English SMS phishing detection / 支持中英文短信钓鱼检测
- URL phishing detection / URL 钓鱼检测
- DNS protection / DNS 防护
v1.4.0-english
TianshangGuard v1.4.0 (English)
Release Date: 2026-06-28
Package: com.tianshang.guard.en
Language: English (fixed)
Version: versionCode=9, versionName=1.4.0-en
New Features
- Language switching infrastructure (UI only visible in Unified version)
Security Audit Fixes (38 vulnerabilities)
- 4 Critical: SQL injection, buffer overflow, response truncation, UTF-8 truncation
- 13 High: Race conditions, thread safety, resource leaks, memory leaks, certificate pinning
- 14 Medium: Visibility, IP regex, signature bypass, log sanitization
- 7 Low: Integer overflow, regex reuse
Build Info
- Build: SUCCESS
- Real device test: PASS
Download
- TianshangGuard-v1.4.0-english.apk — English UI (fixed)
v1.4.0-chinese
TianshangGuard v1.4.0（中文版）
发布日期: 2026-06-28
包名: com.tianshang.guard.zh
语言: 中文（固定）
版本号: versionCode=9, versionName=1.4.0-zh
新功能
- 语言切换基础设施（UI 仅在 Unified 版本可见）
安全审计修复（38 个漏洞）
- 4 个 Critical：SQL 注入、缓冲区溢出、响应截断、UTF-8 截断
- 13 个 High：竞态条件、线程安全、资源泄漏、内存泄漏、证书固定等
- 14 个 Medium：可见性、IP 正则、签名绕过、日志脱敏等
- 7 个 Low：整数溢出、正则复用等
构建信息
- Build: SUCCESS
- 真机测试: PASS
下载
- TianshangGuard-v1.4.0-chinese.apk — 中文 UI（固定）
v1.3.2-unified
TianshangGuard v1.3.2 (Unified / 统一版)
Release Date / 发布日期: 2026-06-28
Package / 包名: com.tianshang.guard
Language / 语言: Auto-detect Chinese & English / 自动检测中英文
Version / 版本号: versionCode=8, versionName=1.3.2-unified
English
Security Audit Fixes (38 vulnerabilities across 2 rounds)
Round 1: 18 vulnerabilities
Critical (4)
- SQL injection: EncryptedDatabaseProvider path and passphrase sanitization
- Buffer overflow: DnsPacketHandler IP checksum bounds check
- Response truncation: GuardVpnService use remaining() instead of limit()
- UTF-8 truncation: ByteTokenizer multi-byte character safe truncation
High (6)
- Race condition: Bm25Engine feedback index synchronization
- Thread safety: OnnxMlEngine use ConcurrentHashMap
- Resource leak: DohClient response body properly closed
- Memory leak: LocalDnsEngine coroutine scope cancellation
- Whitelist bypass: HomographDetector homograph detection
- Keepalive encoding: GuardVpnService DNS label encoding
Medium (8)
- Visibility, IP regex, signature bypass, duplicate key, integer overflow, threshold protection, log sanitization
Round 2: 20 vulnerabilities
Critical (2)
- VPN restart cancellation: restartRunnable cancellable on stopVpn()
- ONNX session leak: close old OrtSession on model reload
High (7)
- File stream leak: handlePackets() finally block closes streams
- @volatile: LocalDnsEngine shared field visibility
- BK-tree race: double-checked locking
- Rate limiter race: canLaunchAlert() synchronized
- pendingRunnables leak: consume() cleanup
- State race: MlEngineWithFallback.getState() synchronized
- Certificate pinning: Cloudflare DoH endpoint pins
Medium (6)
- TTL expiry, BootReceiver DI, SQL sanitization, certificate pinning, clearFeedbackIndex sync
Low (5)
- Integer overflow, regex reuse, clear() fix
中文
安全审计修复（两轮共 38 个漏洞）
第一轮：18 个漏洞
Critical (4)
- SQL 注入：EncryptedDatabaseProvider 路径和密码清理
- 缓冲区溢出：DnsPacketHandler IP 校验和边界检查
- 响应截断：GuardVpnService 使用 remaining() 替代 limit()
- UTF-8 截断：ByteTokenizer 多字节字符安全截断
High (6)
- 竞态条件：Bm25Engine 反馈索引同步
- 线程安全：OnnxMlEngine 使用 ConcurrentHashMap
- 资源泄漏：DohClient 响应体正确关闭
- 内存泄漏：LocalDnsEngine 协程作用域取消
- 白名单绕过：HomographDetector 同形字符检测
- Keepalive 编码：GuardVpnService DNS 标签编码
Medium (8)
- 可见性、IP 正则、签名绕过、重复 key、整数溢出、阈值保护、日志脱敏
第二轮：20 个漏洞
Critical (2)
- VPN 重启取消：restartRunnable 可在 stopVpn() 时取消
- ONNX 会话泄漏：模型重载时关闭旧 OrtSession
High (7)
- 文件流关闭：handlePackets() finally 块关闭流
- @volatile：LocalDnsEngine 共享字段可见性
- BK-tree 竞态：双重检查锁定
- 限流器竞态：canLaunchAlert() 同步
- pendingRunnables 泄漏：consume() 清理
- 状态竞态：MlEngineWithFallback.getState() 同步
- 证书固定：Cloudflare DoH 端点固定
Medium (6)
- TTL 过期、BootReceiver DI、SQL 清理、证书固定、clearFeedbackIndex 同步
Low (5)
- 整数溢出、正则复用、clear() 修复
Build Info / 构建信息
- Build / 构建: SUCCESS
- Real device test / 真机测试: PASS
- Memory / 内存: ~88 MB PSS
Download / 下载
- TianshangGuard-v1.3.2-unified.apk — Auto-detect language / 自动检测语言
- Supports Chinese & English SMS phishing detection / 支持中英文短信钓鱼检测
- URL phishing detection / URL 钓鱼检测
- DNS protection / DNS 防护
Contributors
volatile
Assets 3
v1.3.2-english
TianshangGuard v1.3.2 (English)
Release Date: 2026-06-28
Package: com.tianshang.guard.en
Language: English
Version: versionCode=8, versionName=1.3.2-en
Security Audit Fixes (38 vulnerabilities across 2 rounds)
Round 1: 18 vulnerabilities
Critical (4)
- SQL injection: EncryptedDatabaseProvider path and passphrase sanitization
- Buffer overflow: DnsPacketHandler IP checksum bounds check
- Response truncation: GuardVpnService use remaining() instead of limit()
- UTF-8 truncation: ByteTokenizer multi-byte character safe truncation
High (6)
- Race condition: Bm25Engine feedback index synchronization
- Thread safety: OnnxMlEngine use ConcurrentHashMap
- Resource leak: DohClient response body properly closed
- Memory leak: LocalDnsEngine coroutine scope cancellation
- Whitelist bypass: HomographDetector homograph detection
- Keepalive encoding: GuardVpnService DNS label encoding
Medium (8)
- Visibility, IP regex, signature bypass, duplicate key, integer overflow, threshold protection, log sanitization
Round 2: 20 vulnerabilities
Critical (2)
- VPN restart cancellation: restartRunnable cancellable on stopVpn()
- ONNX session leak: close old OrtSession on model reload
High (7)
- File stream leak: handlePackets() finally block closes streams
- @volatile: LocalDnsEngine shared field visibility
- BK-tree race: double-checked locking
- Rate limiter race: canLaunchAlert() synchronized
- pendingRunnables leak: consume() cleanup
- State race: MlEngineWithFallback.getState() synchronized
- Certificate pinning: Cloudflare DoH endpoint pins
Medium (6)
- TTL expiry, BootReceiver DI, SQL sanitization, certificate pinning, clearFeedbackIndex sync
Low (5)
- Integer overflow, regex reuse, clear() fix
Build Info
- Build: SUCCESS
- Real device test: PASS
- Memory: ~88 MB PSS
Download
- TianshangGuard-v1.3.2-english.apk — English UI + English SMS phishing detection
Contributors
volatile
Assets 3
v1.3.2-chinese
TianshangGuard v1.3.2（中文版）
发布日期: 2026-06-28
包名: com.tianshang.guard.zh
语言: 中文
版本号: versionCode=8, versionName=1.3.2-zh
安全审计修复（两轮共 38 个漏洞）
第一轮：18 个漏洞
Critical (4)
- SQL 注入：EncryptedDatabaseProvider 路径和密码清理
- 缓冲区溢出：DnsPacketHandler IP 校验和边界检查
- 响应截断：GuardVpnService 使用 remaining() 替代 limit()
- UTF-8 截断：ByteTokenizer 多字节字符安全截断
High (6)
- 竞态条件：Bm25Engine 反馈索引同步
- 线程安全：OnnxMlEngine 使用 ConcurrentHashMap
- 资源泄漏：DohClient 响应体正确关闭
- 内存泄漏：LocalDnsEngine 协程作用域取消
- 白名单绕过：HomographDetector 同形字符检测
- Keepalive 编码：GuardVpnService DNS 标签编码
Medium (8)
- 可见性、IP 正则、签名绕过、重复 key、整数溢出、阈值保护、日志脱敏
第二轮：20 个漏洞
Critical (2)
- VPN 重启取消：restartRunnable 可在 stopVpn() 时取消
- ONNX 会话泄漏：模型重载时关闭旧 OrtSession
High (7)
- 文件流关闭：handlePackets() finally 块关闭流
- @volatile：LocalDnsEngine 共享字段可见性
- BK-tree 竞态：双重检查锁定
- 限流器竞态：canLaunchAlert() 同步
- pendingRunnables 泄漏：consume() 清理
- 状态竞态：MlEngineWithFallback.getState() 同步
- 证书固定：Cloudflare DoH 端点固定
Medium (6)
- TTL 过期、BootReceiver DI、SQL 清理、证书固定、clearFeedbackIndex 同步
Low (5)
- 整数溢出、正则复用、clear() 修复
构建信息
- Build: SUCCESS
- 真机测试: PASS
- 内存: ~88 MB PSS
下载
- TianshangGuard-v1.3.2-chinese.apk — 中文 UI + 中文短信钓鱼检测
Contributors
volatile