Repository navigation
HyperDL v1.3.46
HyperDL v1.3.46
b13460 · full-zip release · changes since
v1.3.45
Hardens the native bridge so the delete action can never touch files outside your HyperDL folder, keeps your login cookies owner-only, and makes downloads work on work profiles and secondary users.
Highlights
| Area | What changed |
|---|---|
| Safety | Deletion refuses any path outside the HyperDL download folder |
| Privacy | Cookie sessions are no longer readable by other apps |
| Compatibility | Downloads work on work profiles and secondary users |
Safety
- Deletion is now restricted to HyperDL's own folder. The bridge used to accept any path handed to it, so a malformed request could remove files outside your downloads. Every path is now checked against the output folder before anything is unlinked, and paths that try to climb out with
../are rejected outright. - Nothing changed about normal use: deleting a download from the list or clearing junk behaves exactly as before.
Privacy
- Cookie sessions are locked to owner-only. A cookie file is a live login session for your accounts, so it no longer sits in a world-readable file. HyperDL itself is unaffected, and the bridge already runs as root.
- The configuration folder is owner-only for the same reason. Downloaded media stays readable so your gallery and file managers keep working normally.
Compatibility
- Work profiles and secondary users can now download. Those users do not own
/storage/emulated/0, which is where HyperDL used to hardcode its download folder. The output location is now detected at startup, falling back to/data/media/0when needed, and the installer tells you when that happens. - On a normal single-user phone nothing changes: downloads still land in
Download/HyperDL/.
Install
| Method | Steps |
|---|---|
| Flash the zip | Download HyperDL-v1.3.46.zip below, then install it from KernelSU, APatch, or Magisk › Install from storage |
| Live deploy | ./build.sh --deploy updates the module on a connected device without a reboot |
Requires Android 10+ on ARM64 with root. Cookies stay optional for public media.
Full changelog: README.md
Update from your root manager or flash HyperDL-v1.3.46.zip.