Skip to content

v1.3.6 - Security Auditing & Playback Controls Fixes πŸ›‘οΈ Latest

Choose a tag to compare

@itsmeshibintmz itsmeshibintmz released this 28 Jun 06:36

This release addresses important security findings surfaced during SonarQube code audits and resolves an autoplay bug affecting the "Continue Watching" show details panel.


πŸš€ What's New

πŸ›‘οΈ SonarQube Code Hardening:

  • Disabled Production Web Inspector (swift:S507): Wrapped WebKit developer extras in a #if DEBUG check. This completely disables DOM inspection and arbitrary JavaScript execution in release builds, protecting code integrity.
  • Restricted WebView Navigation (swift:S7485): Restructured the navigation delegate to restrict page-level browsing strictly to *.netflix.com. External links clicked inside the app will now automatically open in the user's default macOS system browser (Safari/Chrome) rather than inside the app interface.
  • Maintained Asset Compatibility: Fully allowed sub-resources, stylesheets, scripts, and security CAPTCHAs (like Arkose Labs or Google reCAPTCHA) to load seamlessly to avoid any login disruption.

🎬 Playback Controls:

  • Fixed Continue Watching Autoplay Bug: Resolved an issue where clicking a show in the "Continue Watching" row loaded the details screen for a brief second before automatically starting video playback. The background binge-monitoring loop is now restricted to only trigger actions (like Auto-Skip or Auto-Play Next) when the active browser path matches a video playback URL (/watch).