bitwarden / android

Bitwarden mobile app for Android.
https://bitwarden.com
GNU General Public License v3.0
6.56k stars 821 forks source link

PM-15177: Improve destructive fallback logic #4372

Closed david-livefront closed 3 days ago

david-livefront commented 3 days ago

🎟️ Tracking

PM-15177

📔 Objective

This PR update the logic for managing a destructive fallback. The big difference is that we clear the lasSyncTime for all users to ensure that vault gets re-synced.

⏰ Reminders before review

🦮 Reviewer guidelines

github-actions[bot] commented 3 days ago

Logo Checkmarx One – Scan Summary & Detailsa4fbdf08-861b-430d-b355-38b94605a8e2

New Issues

Severity Issue Source File / Package Checkmarx Insight
MEDIUM Privacy_Violation /app/src/main/java/com/x8bit/bitwarden/data/tools/generator/repository/utils/GeneratorRepositoryExtensions.kt: 11 Attack Vector
MEDIUM Privacy_Violation /app/src/main/java/com/x8bit/bitwarden/data/autofill/manager/AutofillTotpManagerImpl.kt: 29 Attack Vector
MEDIUM Privacy_Violation /app/src/main/java/com/x8bit/bitwarden/ui/auth/feature/completeregistration/CompleteRegistrationViewModel.kt: 341 Attack Vector
MEDIUM Privacy_Violation /app/src/main/java/com/x8bit/bitwarden/ui/auth/feature/completeregistration/CompleteRegistrationViewModel.kt: 341 Attack Vector
MEDIUM Privacy_Violation /app/src/main/java/com/x8bit/bitwarden/ui/platform/feature/settings/accountsecurity/deleteaccount/DeleteAccountViewModel.kt: 94 Attack Vector
MEDIUM Privacy_Violation /app/src/main/java/com/x8bit/bitwarden/ui/auth/feature/completeregistration/CompleteRegistrationViewModel.kt: 240 Attack Vector
MEDIUM Privacy_Violation /app/src/main/java/com/x8bit/bitwarden/ui/auth/feature/completeregistration/CompleteRegistrationViewModel.kt: 251 Attack Vector
MEDIUM Privacy_Violation /app/src/main/java/com/x8bit/bitwarden/ui/auth/feature/completeregistration/CompleteRegistrationViewModel.kt: 262 Attack Vector
LOW Unpinned Actions Full Length Commit SHA /crowdin-pull.yml: 26 Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps...
LOW Use_of_Hardcoded_Password /app/src/main/java/com/x8bit/bitwarden/data/autofill/util/HtmlInfoExtensions.kt: 20 Attack Vector
david-livefront commented 3 days ago

Thanks @SaintPatrck

codecov[bot] commented 3 days ago

Codecov Report

Attention: Patch coverage is 92.85714% with 2 lines in your changes missing coverage. Please review.

Please upload report for BASE (release/2024.11-rc1@366c86d). Learn more about missing BASE report.

Files with missing lines Patch % Lines
...data/platform/manager/DatabaseSchemeManagerImpl.kt 83.33% 0 Missing and 1 partial :warning:
...arden/data/vault/repository/VaultRepositoryImpl.kt 95.23% 0 Missing and 1 partial :warning:
Additional details and impacted files ```diff @@ Coverage Diff @@ ## release/2024.11-rc1 #4372 +/- ## ====================================================== Coverage ? 88.97% ====================================================== Files ? 453 Lines ? 39018 Branches ? 5502 ====================================================== Hits ? 34717 Misses ? 2374 Partials ? 1927 ```

:umbrella: View full report in Codecov by Sentry.
:loudspeaker: Have feedback on the report? Share it here.


🚨 Try these New Features: