diff options
| author | Peter Stone <thepeterstone@gmail.com> | 2026-08-22 00:56:59 +0000 |
|---|---|---|
| committer | Peter Stone <thepeterstone@gmail.com> | 2026-08-22 00:56:59 +0000 |
| commit | 00d873a3c5709200451c74b46860a67c1c1a52c7 (patch) | |
| tree | 87c090e78c55b34fba2e529a32c57644d002b989 /app/src/main/java/org/terst/feedreader/data/ArticleSaving.kt | |
| parent | 70c537fae9dc5e22bf8bb7bc226221b4e66b994d (diff) | |
Require explicit tap before ShareReceiverActivity saves anything
This activity is exported (any installed app can target it directly
with an ACTION_SEND intent, not just via the system share sheet).
Starting extraction/Stash-save immediately on launch meant any other
app could silently make this one fetch+JS-render an arbitrary URL and
archive it to the user's own Stash server with zero user interaction.
A tap is now the only thing standing between "another app sent an
intent" and "real network work happens."
Also switches to the shared saveArticleToStash helper while touching
this same code path.
Diffstat (limited to 'app/src/main/java/org/terst/feedreader/data/ArticleSaving.kt')
0 files changed, 0 insertions, 0 deletions
