Ole-Morten Duesund
e93273bff4
- Wrap deleteAll+insertAll in Room transaction to prevent data loss
on crash during refresh
- Add CancellationException rethrow in ShelterRepository and
MapCacheManager to preserve structured concurrency
- Close OkHttp response body on error paths (response.use{})
- Add ZIP bomb protection (10MB cap) in GeoJSON parser
- Add per-feature error handling — skip malformed records instead of
losing all shelters
- Validate coordinates within Norway's bounding box
- Enforce HTTPS-only via network_security_config (remove cleartext
allowance for tile.openstreetmap.org)
- Disable android:allowBackup to prevent DB extraction via ADB
- Strip Log.v/d/i in release builds via ProGuard to prevent location
data leakage
- Restore map position in MapCacheManager.finally block on
cancellation
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
19 lines
469 B
Prolog
19 lines
469 B
Prolog
# OSMDroid
|
|
-keep class org.osmdroid.** { *; }
|
|
-dontwarn org.osmdroid.**
|
|
|
|
# Room
|
|
-keep class * extends androidx.room.RoomDatabase
|
|
-keep @androidx.room.Entity class *
|
|
-dontwarn androidx.room.paging.**
|
|
|
|
# OkHttp
|
|
-dontwarn okhttp3.**
|
|
-dontwarn okio.**
|
|
|
|
# Strip verbose/debug/info logs in release builds (prevent location data leakage)
|
|
-assumenosideeffects class android.util.Log {
|
|
public static int v(...);
|
|
public static int d(...);
|
|
public static int i(...);
|
|
}
|