v1.3.6 - Security Auditing & Playback Controls Fixes π‘οΈ Latest
This release addresses important security findings surfaced during SonarQube code audits and resolves an autoplay bug affecting the "Continue Watching" show details panel.
π What's New
π‘οΈ SonarQube Code Hardening:
- Disabled Production Web Inspector (
swift:S507): Wrapped WebKit developer extras in a#if DEBUGcheck. This completely disables DOM inspection and arbitrary JavaScript execution in release builds, protecting code integrity. - Restricted WebView Navigation (
swift:S7485): Restructured the navigation delegate to restrict page-level browsing strictly to*.netflix.com. External links clicked inside the app will now automatically open in the user's default macOS system browser (Safari/Chrome) rather than inside the app interface. - Maintained Asset Compatibility: Fully allowed sub-resources, stylesheets, scripts, and security CAPTCHAs (like Arkose Labs or Google reCAPTCHA) to load seamlessly to avoid any login disruption.
π¬ Playback Controls:
- Fixed Continue Watching Autoplay Bug: Resolved an issue where clicking a show in the "Continue Watching" row loaded the details screen for a brief second before automatically starting video playback. The background binge-monitoring loop is now restricted to only trigger actions (like Auto-Skip or Auto-Play Next) when the active browser path matches a video playback URL (
/watch).