Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Protection of intentURL attack using interactive dialog confirmation #315

Merged
merged 2 commits into from
Oct 7, 2023

Conversation

cyb3rko
Copy link
Contributor

@cyb3rko cyb3rko commented Oct 1, 2023

As discussed before here's the implementation using a dialog activity.
What's missing now is getting the permission. As it's rather optional to use this feature I wonder how we want to inform the user about the missing permission.

Same as with the other permissions right at the launch (InitializationActivity) or via the settings?

Closes #227

Copy link
Member

@jmattheis jmattheis left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Works like a charm (:

app/src/main/res/values/strings.xml Outdated Show resolved Hide resolved
app/src/main/res/values/styles.xml Show resolved Hide resolved
app/src/main/AndroidManifest.xml Outdated Show resolved Hide resolved
app/src/main/res/values/styles.xml Show resolved Hide resolved
@cyb3rko cyb3rko marked this pull request as ready for review October 3, 2023 14:36
Copy link
Member

@jmattheis jmattheis left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

👍

@jmattheis jmattheis merged commit 361c480 into gotify:master Oct 7, 2023
1 check passed
@cyb3rko cyb3rko deleted the intent-url-protection branch October 7, 2023 10:01
jmattheis added a commit to gotify/website that referenced this pull request Nov 18, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
2 participants