github havesource/cordova-plugin-push 2.0.1

latest releases: 5.0.6, 4.0.1, 3.0.2...
2 months ago

While this major branch is no longer supported, this patch release was made solely to apply the following update:

Security Release Notes:

To strengthen application security, we have updated the android:exported flag for all relevant activities and services to false.

Affected components:

  • PushHandlerActivity (Activity)
  • BackgroundHandlerActivity (Activity)
  • com.adobe.phonegap.push.FCMService (Service)
  • com.adobe.phonegap.push.PushInstanceIDListenerService (Service)

We also added the <uses-permission> and <permission> declarations for PushHandlerActivity and BackgroundHandlerActivity with android:protectionLevel="signature". While these permissions are likely redundant given that all components are no longer exported, it will be an added safe-guard.

  • fix(android): set exported to false & add missing permissions w/ protectionLevel signature

Full Changelog: 2.0.0...2.0.1

Don't miss a new cordova-plugin-push release

NewReleases is sending notifications on new releases.