Skip to content

Tags: PatzEdi/AndroidSecretary

Tags

v1.0.0

Toggle v1.0.0's commit message

Verified

This commit was signed with the committer’s verified signature.
PatzEdi Edward Ferrari
Release v1.0.0

Update README.md and SETUP.md to refine spam blocking instructions and enhance flow setup guidance

v0.0.2-alpha

Toggle v0.0.2-alpha's commit message

Verified

This commit was signed with the committer’s verified signature.
PatzEdi Edward Ferrari
Optimize some code, add README, SETUP.md, in preparation for release

v0.0.1-alpha

Toggle v0.0.1-alpha's commit message

Verified

This commit was signed with the committer’s verified signature.
PatzEdi Edward Ferrari
Fix message counter and remove vulnerability (read desc)

Vulnerability consisted being able to modify attributes of the flask
backend from the outside. When there would be a number in the message,
not necessarily marking the sender's number, but e.g. someone who sent a
message with someone else's number, that other number gets added to the
messages counter and may get blocked. This vulenerability used the "in"
keyword to check for numbers in the message, now we use the find
function to check if the number is at the start of the message, which is
always is unless the Automate flow is modified. Another thing this
vulnerability would likely cause is different sender's messages being
mixed in the sender_chat_log, which would have the potential of leaking
some information from other chats.