Skip to content

GrowSurf iOS SDK 0.2.1

Choose a tag to compare

@kevinyun kevinyun released this 28 May 11:27
· 4 commits to main since this release

0.2.1

Security hardening for the native GrowSurf window cache and the in-window image loader.

  • Encrypts the participant-scoped window cache via NSFileProtectionCompleteUntilFirstUserAuthentication, matching the Keychain accessibility used for tokens. Legacy UserDefaults cache entries are cleared on first use.
  • Re-validates every redirect hop in the in-window remote image loader against the supported scheme allow-list to block downgrade attempts to non-http(s) schemes (e.g. file: / jar:).
  • No public API or installation changes. Source-compatible upgrade from 0.2.0.