github havesource/cordova-plugin-push 5.0.6

2 months ago

While this major branch is no longer supported, this patch release was made solely to apply the following update:

Security Release Notes:

To strengthen application security, we have updated the android:exported flag for all relevant activities and services to false.

Affected components:

  • PushHandlerActivity (Activity)
  • BackgroundHandlerActivity (Activity)
  • com.adobe.phonegap.push.FCMService (Service)

We also added the <uses-permission> and <permission> declarations for BackgroundHandlerActivity with android:protectionLevel="signature". While these permissions are likely redundant given that all components are no longer exported, it will be an added safe-guard.

  • fix(android): set exported to false & add missing permissions w/ protectionLevel signature

Full Changelog: 5.0.5...5.0.6

Don't miss a new cordova-plugin-push release

NewReleases is sending notifications on new releases.