fix: Add build script and fix manifest
- Add build-apk.sh for easy compilation - Simplify AndroidManifest.xml - Fix themes.xml to use basic Android themes - Enable BuildConfig - Add okhttp-dnsoverhttps dependency
This commit is contained in:
@@ -0,0 +1,7 @@
|
||||
<?xml version="1.0" encoding="utf-8"?>
|
||||
<paths xmlns:android="http://schemas.android.com/apk/res/android">
|
||||
<external-files-path name="downloads" path="Download/updates/" />
|
||||
<external-cache-path name="external_cache" path="." />
|
||||
<files-path name="files" path="." />
|
||||
<cache-path name="cache" path="." />
|
||||
</paths>
|
||||
@@ -0,0 +1,61 @@
|
||||
<?xml version="1.0" encoding="utf-8"?>
|
||||
<!--
|
||||
Network Security Configuration for IPTV App
|
||||
|
||||
This configuration allows HTTP traffic for IPTV streams, which is commonly
|
||||
required since many IPTV providers still use unencrypted HTTP streams.
|
||||
|
||||
WARNING: Using cleartext traffic is less secure than HTTPS. Only use this
|
||||
configuration if your IPTV provider does not support HTTPS.
|
||||
|
||||
Security Recommendations:
|
||||
1. Prefer HTTPS streams whenever possible
|
||||
2. Use a VPN when streaming over HTTP
|
||||
3. Validate stream sources before adding them
|
||||
4. Keep the app updated with security patches
|
||||
-->
|
||||
<network-security-config>
|
||||
|
||||
<!-- Base configuration - cleartext traffic permitted by default -->
|
||||
<base-config cleartextTrafficPermitted="true">
|
||||
<trust-anchors>
|
||||
<!-- Trust system certificates -->
|
||||
<certificates src="system" />
|
||||
<!-- Trust user-added certificates (for debugging with proxies) -->
|
||||
<certificates src="user" />
|
||||
</trust-anchors>
|
||||
</base-config>
|
||||
|
||||
<!-- Domain-specific configurations -->
|
||||
<!-- Add specific domains that require cleartext traffic -->
|
||||
<domain-config cleartextTrafficPermitted="true">
|
||||
<!-- Common IPTV stream domain patterns -->
|
||||
<domain includeSubdomains="true">localhost</domain>
|
||||
<domain includeSubdomains="true">127.0.0.1</domain>
|
||||
<domain includeSubdomains="true">192.168.*</domain>
|
||||
<domain includeSubdomains="true">10.*</domain>
|
||||
<domain includeSubdomains="true">172.16.*</domain>
|
||||
|
||||
<!-- Pinning configuration for known secure domains (example) -->
|
||||
<!-- Uncomment and configure for production apps with known domains -->
|
||||
<!--
|
||||
<pin-set expiration="2025-01-01">
|
||||
<pin digest="SHA-256">sha256/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=</pin>
|
||||
<pin digest="SHA-256">sha256/BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB=</pin>
|
||||
</pin-set>
|
||||
<trust-anchors>
|
||||
<certificates src="system"/>
|
||||
</trust-anchors>
|
||||
-->
|
||||
</domain-config>
|
||||
|
||||
<!-- Debug configuration - only use for development -->
|
||||
<!-- This allows cleartext traffic to all domains when debugging -->
|
||||
<debug-overrides>
|
||||
<trust-anchors>
|
||||
<certificates src="system" />
|
||||
<certificates src="user" />
|
||||
</trust-anchors>
|
||||
</debug-overrides>
|
||||
|
||||
</network-security-config>
|
||||
Reference in New Issue
Block a user