markpash
commented
3 months ago You might have realised that @uoosef is unable to work on these projects as he's suspected of being arrested. In the meantime I've had to take over maintenance of the projects to keep them going, but I don't have a strong android development background. This issue is exactly the kind of thing I appreciate, so please do make more issues if you see more problems like this. Also feel free to make pull requests. I will try my best to consult with android developers that I trust to make sure code is validated and safely merged. :heart:
pcabidigital
"switch-button" library you're using (com.github.zcweng:switch-button:0.0.3) might be outdated. please check if there are newer versions available.
Why ProGaurd is disabled? (minifyEnabled false) - It is better to make it harder for attackers to reverse engineer your code.
You've set the repositoriesMode to FAIL_ON_PROJECT_REPOS. Does this means that Gradle will fail if there are any project-specific repositories defined in subprojects?
In gradlew.bat document: In the provided script, users can customize JVM options (like memory settings) through environment variables such as JAVA_OPTS and GRADLE_OPTS. This means users can set their own values for these variables. If these variables are not properly validated and sanitized (checked for harmful input), attackers could potentially manipulate them to execute malicious commands or perform unauthorized actions on the system.