summaryrefslogtreecommitdiff
path: root/app/src/main/res/values/themes.xml
diff options
context:
space:
mode:
authorPeter Stone <thepeterstone@gmail.com>2026-08-22 00:56:59 +0000
committerPeter Stone <thepeterstone@gmail.com>2026-08-22 00:56:59 +0000
commit00d873a3c5709200451c74b46860a67c1c1a52c7 (patch)
tree87c090e78c55b34fba2e529a32c57644d002b989 /app/src/main/res/values/themes.xml
parent70c537fae9dc5e22bf8bb7bc226221b4e66b994d (diff)
Require explicit tap before ShareReceiverActivity saves anything
This activity is exported (any installed app can target it directly with an ACTION_SEND intent, not just via the system share sheet). Starting extraction/Stash-save immediately on launch meant any other app could silently make this one fetch+JS-render an arbitrary URL and archive it to the user's own Stash server with zero user interaction. A tap is now the only thing standing between "another app sent an intent" and "real network work happens." Also switches to the shared saveArticleToStash helper while touching this same code path.
Diffstat (limited to 'app/src/main/res/values/themes.xml')
0 files changed, 0 insertions, 0 deletions