fix(android): harden origin isolation and native file lifecycles

Block cross-origin POSTs, preserve bounded generated exports without relaxing CSP, bind picker results to their initiating context, erase camera cache and constrain platform permissions. Upgrade vulnerable build/test tooling and lock runtime/build dependencies. JVM regressions, lint and unsigned release builds pass; extended emulator validation remains separate.
This commit is contained in:
Yuvomi Mobile Contributors committed 2026-10-21 07:25:00 +02:00
1 parent f776c853c6
commit 2b9996ff3f
24 files changed
+1446 -173

No files matched your search

Binary file not shown.