dtourolle/jellytau
1
0
Fork 0
Code Issues Pull Requests Actions 2 Packages Projects Releases 38 Wiki Activity

merge: Android runtime security (B1, B3)

Browse Source 
Correct the POST_NOTIFICATIONS mechanism: the lockscreen notification is exempt
because of the MediaSession token, not because it belongs to a foreground
service — FGS notifications are explicitly NOT exempt. So no permission prompt
and no checkSelfPermission gate; instead both notification builders bind the
token once and log loudly if it is ever null, turning a silent failure into a
logcat line. Stop the webview undoing the network security config:
mixedContentMode COMPATIBILITY, allowFileAccess/allowContentAccess false.

Conflict resolution: this branch's DR-198 collided with the Tauri branch's, so
it was renumbered DR-200 (3 TRACES in JellyTauPlaybackService.kt and the UR-006
matrix row updated). DR-199 was uncontested. Pinned counts summed to DR 191 /
total 334; UR-071 takes both DR-198 and DR-199.
This commit is contained in:
dtourolle
2026-08-16 23:03:29 +02:00
parent c9f33ae6a4 2d21f092d5
commit 88e15e3e12
8 changed files with 221 additions and 15 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/traceability.md
+1 -1
View File
@@ -1,6 +1,6 @@
# Code Traceability Matrix
**Generated:** 8/16/2026, 11:01:38 PM
**Generated:** 8/16/2026, 11:03:18 PM
## Summary