MaheshTechnicals/Sealplus v2.6.0

Seal Plus v2.6.0

on GitHub

✨ Seal Plus v2.6.0 - Security Hardening, 20 Stability Fixes & Material3 Stable

🔒 Security Hardening

• PBKDF2 PIN Hashing

  • PIN-based App Lock now uses PBKDF2WithHmacSHA256 with 16-byte salt and 200,000 iterations
  • Existing PINs are automatically migrated on next unlock

• Removed Overly Broad Storage Permission

  • MANAGE_EXTERNAL_STORAGE removed — no more "All Files Access" required

• ADB Backup Protection

  • MMKV preferences (PIN hash, settings) excluded from ADB backups via backup_rules.xml

• NotificationActionReceiver Secured

  • exported=false set in manifest — blocks fake notification intent injection

• MITM Prevention on Proxy

  • --no-check-certificate disabled when proxy is active

• Proxy Security Warning Dialog

  • Warning shown before enabling free proxy mode

🛡️ Brute-Force Protection

• 30-Second Lockout on App Lock
  • Animated 30-second countdown after 5 failed PIN attempts

🐛 Stability & Correctness (20 Fixes)

• Context leak fixed — Activity context no longer overwrites App.context
• All runBlocking calls replaced with lifecycleScope.launch(IO) (prevents ANRs)
• OkHttp timeouts added to UpdateUtil; singletons shared across 4 utilities
• SQLiteDatabase and Cursor properly closed with .use{} on all paths
• ConcurrentHashMap used for download maps — race conditions fixed
• 5-minute deadline added to addToDownloadQueue — prevents coroutine leaks
• av01 removed from unsupported codec blacklist — AV1 downloads work again
• filterValidFormats parallelized with async/awaitAll — faster format page
• makeKey() uses null-char delimiter — hash collision fixed
• Error notifications use throwable.message instead of full stack trace
• And 10 more fixes in DatabaseUtil, DownloadUtil, HomePageViewModel, CookiesViewModel, FileUtil

🎨 Material3 1.3.1 Stable Migration

• Upgraded from alpha to stable Compose BOM
  • SheetState, TooltipDefaults, ExposedDropdownMenu APIs updated across 7 files
• OkHttp: 5.0.0-alpha.14 → 4.12.0 (stable)
• biometric upgraded to 1.2.0-alpha05 for better OEM compatibility

🏠 Home Page Sync Fix

• Deletions on VideoList page now reflect in Recent Downloads immediately — no restart needed
• File existence re-checked on every ON_RESUME — deleted files gray out instantly

🌐 Sponsor Data Refactor

• Richer sponsor profiles with SocialAccount, SponsorEntity, Tier data classes
• Thread-safe @Volatile + synchronized double-checked locking cache

📦 Installation

Download the appropriate APK for your device:

• Universal APK: Works on all devices (recommended)
• arm64-v8a: For 64-bit ARM devices (most modern phones)
• armeabi-v7a: For 32-bit ARM devices
• x86_64: For 64-bit x86 devices
• x86: For 32-bit x86 devices

✨ Key Features (v2.6)

• 🔒 PBKDF2 PIN Hashing - Industry-standard 200K-iteration secure PIN with salt
• 🛡️ 30-Second Brute-Force Lockout - Countdown after 5 failed PIN attempts
• 🔐 Removed MANAGE_EXTERNAL_STORAGE - No overbroad permission required
• 💾 ADB Backup Protection - Sensitive MMKV data excluded from backups
• 🚫 MITM Prevention - SSL check re-enabled when proxy is active
• 🧹 20 Stability Fixes - Context leak, runBlocking, timeouts, race conditions & more
• 🎨 Material3 1.3.1 Stable - Migrated from alpha BOM, OkHttp stable 4.12.0
• 🏠 Instant Home Sync - Recent Downloads updated instantly on deletion or file removal
• 🌐 Richer Sponsor Profiles - Thread-safe cache with structured data
• ⏯️ Pause/Resume downloads with queue support
• 🌐 Download from 1000+ sites via yt-dlp

📜 Full Changelog

See CHANGELOG.md for complete version history.

Built on:
Commit: ec104c2