You've already forked element-x-android
mirror of
https://github.com/element-hq/element-x-android.git
synced 2026-10-23 18:49:00 +03:00
03fd288c47
* Upgrade to `rustls-platform-verifier:0.2.0`. This re-enables certificate revocation checks, but v0.2.0 contains a list of CRL servers that can be accessed using clear text requests to check the validity of certain certificates, which should fix the issue that prevented us from using certificate revocation and at the same time strengthening the security of the client app. Since we already had some network configuration in Element X, and `network_security_config.xml` files can't be merged, what we can do is manually download and merge the XML contents using `tools/dependencies/update_rustls_platform_verifier.py` like this: ```sh ./update_rustls_platform_verifier.py 0.2.0 ``` It will automatically bump the Gradle dependency and merge the security config entries. * Bump SDK bindings to `v26.09.28`, containing the rustls bump on the SDK side * Fix unused resources caused by `app/src/main/res/xml/network_security_config_element.xml`
129 lines
5.1 KiB
XML
129 lines
5.1 KiB
XML
<?xml version="1.0" encoding="UTF-8"?><!--
|
|
~ Copyright (c) 2025 Element Creations Ltd.
|
|
~ Copyright 2022 New Vector Ltd.
|
|
~
|
|
~ SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-Element-Commercial.
|
|
~ Please see LICENSE files in the repository root for full details.
|
|
-->
|
|
<lint>
|
|
|
|
<!-- Ensure this file does not contain unknown Ids -->
|
|
<issue id="UnknownIssueId" severity="warning" />
|
|
|
|
<!-- Modify some severity -->
|
|
|
|
<!-- Resource -->
|
|
<issue id="MissingTranslation" severity="ignore" />
|
|
<issue id="TypographyEllipsis" severity="error" />
|
|
<issue id="ImpliedQuantity" severity="error" />
|
|
<issue id="MissingQuantity" severity="warning" />
|
|
<issue id="UnusedQuantity" severity="error" />
|
|
<issue id="IconXmlAndPng" severity="error" />
|
|
<issue id="IconDipSize" severity="error" />
|
|
<issue id="IconDuplicatesConfig" severity="error" />
|
|
<issue id="IconDuplicates" severity="error" />
|
|
<issue id="IconExpectedSize" severity="error">
|
|
<ignore path="**/ic_launcher_monochrome.webp" />
|
|
</issue>
|
|
<issue id="LocaleFolder" severity="error" />
|
|
|
|
<!-- AlwaysShowAction is considered as an error to force ignoring the issue when detected -->
|
|
<issue id="AlwaysShowAction" severity="error" />
|
|
|
|
<issue id="TooManyViews" severity="warning">
|
|
<!-- Ignore TooManyViews in debug build type -->
|
|
<ignore path="**/src/debug/**" />
|
|
</issue>
|
|
|
|
<issue id="UnusedResources" severity="error">
|
|
<!-- Ignore unused strings resource from localazy -->
|
|
<ignore path="**/localazy.xml" />
|
|
<!-- Ignore unused resource in debug build type -->
|
|
<ignore path="**/src/debug/**" />
|
|
<!-- Ignore unused resources in designsystem since they're imported elsewhere through aliases and can't be properly detected -->
|
|
<ignore path="**/libraries/designsystem/src/main/res/**" />
|
|
<!-- Ignore the network security config template: this will be merged with rustls's security config -->
|
|
<ignore path="**/src/main/res/xml/network_security_config_element.xml" />
|
|
</issue>
|
|
|
|
<!-- UX -->
|
|
<issue id="ButtonOrder" severity="error" />
|
|
<issue id="TextFields" severity="error" />
|
|
|
|
<!-- Accessibility -->
|
|
<issue id="LabelFor" severity="error" />
|
|
<issue id="ContentDescription" severity="error" />
|
|
<issue id="SpUsage" severity="error" />
|
|
|
|
<!-- Layout -->
|
|
<issue id="UnknownIdInLayout" severity="error" />
|
|
<issue id="StringFormatCount" severity="error" />
|
|
<issue id="HardcodedText" severity="error" />
|
|
<issue id="ObsoleteLayoutParam" severity="error" />
|
|
<issue id="InefficientWeight" severity="error" />
|
|
<issue id="DisableBaselineAlignment" severity="error" />
|
|
<issue id="ScrollViewSize" severity="error" />
|
|
<issue id="NegativeMargin" severity="error" />
|
|
|
|
<!-- RTL -->
|
|
<issue id="RtlEnabled" severity="error" />
|
|
<issue id="RtlHardcoded" severity="error" />
|
|
<issue id="RtlSymmetry" severity="error" />
|
|
|
|
<!-- Code -->
|
|
<issue id="NewApi" severity="error" />
|
|
<issue id="SetTextI18n" severity="error" />
|
|
<issue id="ViewConstructor" severity="error" />
|
|
<issue id="UseValueOf" severity="error" />
|
|
<issue id="ObsoleteSdkInt" severity="error" />
|
|
<issue id="Recycle" severity="error" />
|
|
<issue id="KotlinPropertyAccess" severity="error" />
|
|
<issue id="DefaultLocale" severity="error" />
|
|
<issue id="CheckResult" severity="error" />
|
|
<issue id="StaticFieldLeak" severity="error" />
|
|
|
|
<issue id="InvalidPackage">
|
|
<!-- Ignore error from HtmlCompressor lib -->
|
|
<ignore path="**/htmlcompressor-1.4.jar" />
|
|
<!-- Ignore error from dropbox-core-sdk-3.0.8 lib, which comes with Jitsi library -->
|
|
<ignore path="**/dropbox-core-sdk-3.0.8.jar" />
|
|
</issue>
|
|
|
|
<!-- Manifest -->
|
|
<issue id="PermissionImpliesUnsupportedChromeOsHardware" severity="error" />
|
|
<issue id="DataExtractionRules" severity="error" />
|
|
|
|
<!-- Performance -->
|
|
<issue id="UselessParent" severity="error" />
|
|
|
|
<!-- Dependencies -->
|
|
<issue id="KtxExtensionAvailable" severity="error" />
|
|
|
|
<!-- Timber -->
|
|
<!-- This rule is failing on CI because it's marked as unknwown rule id :/-->
|
|
<!-- <issue id="BinaryOperationInTimber" severity="error" />-->
|
|
<issue id="LogNotTimber" severity="error" />
|
|
|
|
<!-- Wording -->
|
|
<issue id="Typos" severity="error" />
|
|
<issue id="TypographyDashes" severity="error" />
|
|
<issue id="PluralsCandidate" severity="error" />
|
|
|
|
<!-- Notification -->
|
|
<issue id="LaunchActivityFromNotification" severity="error" />
|
|
|
|
<!-- We handle them manually -->
|
|
<issue id="EnsureInitializerMetadata" severity="ignore" />
|
|
|
|
<!-- DI -->
|
|
<!-- issue id="JvmStaticProvidesInObjectDetector" severity="error" /-->
|
|
|
|
<!-- Compose -->
|
|
<issue id="UnnecessaryComposedModifier" severity="error" />
|
|
|
|
<!-- There seems to be an issue with this check, it flags lots of false positives. -->
|
|
<!-- See https://issuetracker.google.com/issues/349411310 -->
|
|
<!-- TODO: check again in the near future. -->
|
|
<issue id="ProduceStateDoesNotAssignValue" severity="ignore" />
|
|
</lint>
|