search

talsec / Free-RASP-ReactNative

React Native plugin for improving app security and threat monitoring on Android and iOS mobile devices.
https://github.com/talsec/Free-RASP-Community
MIT License
84 stars 10 forks source link

[Feature Request] Developer Mode Detection #48

Closed asharamseervi closed 4 months ago

asharamseervi commented 7 months ago

Is your feature request related to a problem? Please describe. An extra layer of security can be added to this awesome package by supporting detecting Developer Mode. This is useful and much needed feature to secure app's data.

Describe the solution you'd like A clear and concise description of what you want to happen.

Describe alternatives you've considered A clear and concise description of any alternative solutions or features you've considered.

Additional context Add any other context or screenshots about the feature request here.

msikyna commented 7 months ago

Hello @asharamseervi ,

we are currently doing PoC for this feature. Thank you for the feature request, it is very appreciated!

Kind regards, Talsec team

asharamseervi commented 5 months ago

Hello @msikyna Greetings of the day,, how are you doing?

I'm just following up on this feature request. Are we going to support it, can we prioritize it?

Bharat-Shaw commented 5 months ago

For detection of developer mode.

https://www.npmjs.com/package/jail-monkey The above package provides the developer mode detection, so can you please add this feature in Free-RASP-ReactNative in next release. I am using react native expo.

import JailMonkey from 'jail-monkey' await JailMonkey.isDevelopmentSettingsMode();

Thank you.

syakymchuk commented 5 months ago

Hi @asharamseervi

I'm just following up on this feature request. Are we going to support it, can we prioritize it?

What is the criticality of this feature for you? We have many new good stuff in the pipeline for freeRASP and even more for fullRASP.

Cheers, Talsec CEO Sergiy

asharamseervi commented 5 months ago

Hey Sergiy, Thanks for joining in and understanding users requirements.

Developer Mode is root cause of all evil, specially when developers wants to protect information.

Majorityof the manipulation happens when developer mode is on, we want to detect if developer mode is on, we can redirect or warn user that developer mode is on and there are chances any 3rd party network service or app may trace.

If you ask me our use-case, we're building an LMS which is in active development, and while in development we may leave a loophole unknowingly and any developer may retrieve endpoints which we planning to secure on second priority. Hope you able to get glimpse of my requirement, and may be multiple user may have advantage of this feature.