Enhance UX and security for permission samples and app navigation#1836
Open
ubutatu wants to merge 22 commits into
Open
Enhance UX and security for permission samples and app navigation#1836ubutatu wants to merge 22 commits into
ubutatu wants to merge 22 commits into
Conversation
- Centered content in RequestPermissionSample, RequestMultiplePermissionsSample, and RequestLocationPermissionsSample using Box and Alignment.Center. - Updated text messaging to be more professional and clear (e.g., "The camera permission is required for this feature"). - Implemented human-friendly permission names in RequestMultiplePermissionsSample, mapping technical strings like "android.permission.CAMERA" to "camera". - Applied TextAlign.Center to all text blocks for a more polished and centered presentation. Co-authored-by: ubutatu <207311903+ubutatu@users.noreply.github.com>
Ensures that only activities from the same package are displayed in the sample app's main list. This prevents malicious external apps from injecting themselves into the UI by declaring the same intent category. Co-authored-by: ubutatu <207311903+ubutatu@users.noreply.github.com>
…97897358085154764 🛡️ Sentinel: Fix activity injection in sample app launcher
…s-12544056511410729565 🎨 Palette: Improved UX and layout for permission samples
- Added illustrative icons (Checkmark, Face) to provide visual context and feedback. - Improved spacing with `Arrangement.spacedBy(16.dp)` in `Column` layouts. - Updated button labels to be more specific and action-oriented (e.g., "Allow camera access"). - Ensured consistent implementation across `RequestPermissionSample`, `RequestMultiplePermissionsSample`, and `RequestLocationPermissionsSample`. Co-authored-by: ubutatu <207311903+ubutatu@users.noreply.github.com>
- Set `android:exported="false"` for internal sample activities to follow the principle of least privilege. - Add `android:usesCleartextTraffic="false"` to prevent unencrypted network traffic. - Rename `EXTRA_PATH` in `MainActivity` to use a project-specific prefix, avoiding potential intent collisions. - Add security rationale comments to `AndroidManifest.xml`. Co-authored-by: ubutatu <207311903+ubutatu@users.noreply.github.com>
…e-6453457295241969818 🛡️ Sentinel: Security hardening and hygiene for sample app
- Replace MD5 with SHA-256 in checksum.sh for better integrity verification. - Add fallback to openssl if sha256sum is missing. - Hardened script with proper variable quoting to prevent word-splitting issues. - Update sentinel journal with learnings. Co-authored-by: ubutatu <207311903+ubutatu@users.noreply.github.com>
…56-161281947996985996 🛡️ Sentinel: Upgrade checksum algorithm to SHA-256
…131210143705011077 🎨 Palette: Enhanced Permission Samples UX
I have upgraded the SCM connection and License URLs in gradle.properties from insecure protocols (git:// and http://) to HTTPS. This follows security best practices and ensures encrypted transport for project metadata and source repository connections. 🚨 Severity: MEDIUM 💡 Vulnerability: Use of unencrypted/unauthenticated protocols for metadata. 🎯 Impact: Potential for MITM attacks or metadata spoofing. 🔧 Fix: Upgraded URLs to HTTPS. ✅ Verification: Verified via codebase search and successful build/test execution. Co-authored-by: ubutatu <207311903+ubutatu@users.noreply.github.com>
Added a trailing chevron icon to the list items on the main screen to provide a visual cue that they are interactive and navigable. - Added necessary icon-related imports to `MainScreen.kt`. - Updated `ListItem` in `ContentList` to include `trailingContent` with `Icons.AutoMirrored.Filled.KeyboardArrowRight`. - Verified changes with code review, compilation, and unit tests. - Cleaned up temporary test files. Co-authored-by: ubutatu <207311903+ubutatu@users.noreply.github.com>
…878426983184414501 🎨 Palette: Add trailing chevron to main screen list items
…839920594712352362 🛡️ Sentinel: Upgrade project metadata URLs to HTTPS
Hardened release/signing-setup.sh and checksum.sh to improve security and robustness. - Switch openssl from -k to -pass env:ENCRYPT_KEY to avoid secret exposure in process listings. - Add 'set -e' for fail-fast behavior. - Use proper variable quoting throughout. - Fix checksum.sh openssl fallback for filenames with spaces. - Update .jules/sentinel.md with learnings. Co-authored-by: ubutatu <207311903+ubutatu@users.noreply.github.com>
- Add contextual titles to TopAppBar in sample list - Add back button for sub-category navigation - Add Role.Button to clickable list items for accessibility - Handle long sample titles with ellipsis and maxLines - Add navigation_back string resource Co-authored-by: ubutatu <207311903+ubutatu@users.noreply.github.com>
…7003566024 🛡️ Sentinel: [HIGH] Fix secret exposure in process list and harden scripts
…9317525518460075 🎨 Palette: Enhance sample app navigation and accessibility
- Lifted selectedIcon state to Activity level in NavRail and NavDrawer samples. - Display selected icon and name in the main content area for visual feedback. - Set contentDescription = null on navigation icons to avoid redundancy with labels. - Updated .jules/palette.md with UX/accessibility learnings. Co-authored-by: ubutatu <207311903+ubutatu@users.noreply.github.com>
- Lifted selectedIcon state to Activity level in NavRail and NavDrawer samples. - Display selected icon and name in the main content area for visual feedback. - Set contentDescription = null on navigation icons to avoid redundancy with labels. - Hardened release/signing-setup.sh to skip decryption if key is missing (fixes fork PRs). - Updated workflows to pass ENCRYPT_KEY via environment variables for security and compatibility. - Updated .jules/palette.md with UX/accessibility learnings. Co-authored-by: ubutatu <207311903+ubutatu@users.noreply.github.com>
…335858111622559542 🎨 Palette: Navigation feedback and accessibility in adaptive samples
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Please add the library name to the PR title. Example: "[Insets] Fixes typo"