M57andM57 3e9672f0ad fix(security): validate intent action before consuming notification session id (issue #832) (#845) ...

MainActivity is exported (launcher requirement) and consumed the
session-id extra from any incoming intent without checking the action —
a foreign app could launch it explicitly and force-navigate to a chat
screen. Guard consumeNotificationIntent() on the app's own notification
action and hoist the action string into a shared const so
ChatNotificationService and MainActivity can never drift.

Co-authored-by: M57 <hy4ri@users.noreply.github.com>

2026-08-07 22:42:39 +03:00

..

androidTest/java/com/m57/hermescontrol/ui

feat(chat): render todo tool output as task card (#807)

2026-08-04 19:40:54 +03:00

main

fix(security): validate intent action before consuming notification session id (issue #832) (#845)

2026-08-07 22:42:39 +03:00

test/java/com/m57/hermescontrol

fix(chat): send omit_messages=true on session.resume (issue #842) (#844)

2026-08-07 22:21:16 +03:00