@protobase/mobile 0.73.5 → 0.75.0

package/android/src/main/java/net/protobase/mobile/ExternalUrl.java

@@ -0,0 +1,29 @@
+package net.protobase.mobile;
+
+import java.net.URI;
+import java.net.URISyntaxException;
+import java.util.Locale;
+import java.util.regex.Pattern;
+
+/**
+ * Whether ProtobaseExternal may open a URL, as the server's tapUrl and the shell check it: at most 2048 characters with
+ * no whitespace or control character, parsed as an absolute `http` or `https` URL with a host.
+ */
+final class ExternalUrl {
+
+    private static final Pattern PLAIN = Pattern.compile("^[^\\s\\u0000-\\u001f\\u007f-\\u009f]+$");
+
+    private ExternalUrl() {}
+
+    static boolean allowed(String url) {
+        if (url == null || url.length() > 2048 || !PLAIN.matcher(url).matches()) return false;
+        URI uri;
+        try {
+            uri = new URI(url);
+        } catch (URISyntaxException e) {
+            return false;
+        }
+        String scheme = uri.getScheme() == null ? "" : uri.getScheme().toLowerCase(Locale.ROOT);
+        return (scheme.equals("https") || scheme.equals("http")) && uri.getHost() != null && !uri.getHost().isEmpty();
+    }
+}

package/android/src/main/java/net/protobase/mobile/ProtobaseExternal.java

@@ -0,0 +1,37 @@
+package net.protobase.mobile;
+
+import android.content.ActivityNotFoundException;
+import android.content.Intent;
+import android.net.Uri;
+import com.getcapacitor.Plugin;
+import com.getcapacitor.PluginCall;
+import com.getcapacitor.PluginMethod;
+import com.getcapacitor.annotation.CapacitorPlugin;
+
+/**
+ * Opens an `http` or `https` URL outside the app, in the app the phone opens links with, such as a notification's url
+ * on another origin. Never a navigation of the WebView: Capacitor sends a navigation outside the WebView only for
+ * another host or scheme (Bridge.java launchIntent), so another port of the WebView's own host would load inside it.
+ */
+@CapacitorPlugin(name = "ProtobaseExternal")
+public class ProtobaseExternal extends Plugin {
+
+    @PluginMethod
+    public void open(PluginCall call) {
+        String url = call.getString("url");
+        if (!ExternalUrl.allowed(url)) {
+            call.reject("ProtobaseExternal opens an absolute http or https URL only");
+            return;
+        }
+        Intent intent = new Intent(Intent.ACTION_VIEW, Uri.parse(url));
+        intent.addCategory(Intent.CATEGORY_BROWSABLE);
+        intent.addFlags(Intent.FLAG_ACTIVITY_NEW_TASK);
+        try {
+            getContext().startActivity(intent);
+        } catch (ActivityNotFoundException e) {
+            call.reject("No app opens " + Uri.parse(url).getScheme() + " links", "NO_BROWSER", e);
+            return;
+        }
+        call.resolve();
+    }
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@protobase/mobile",
-  "version": "0.73.5",
+  "version": "0.75.0",
   "description": "The Capacitor that protobase mobile builds a Protobase app's iOS and Android projects with, at fixed versions, and the native plugins that keep page script away from the session and give the iOS app its bounce; installed by the CLI on first use.",
   "license": "Apache-2.0",
   "repository": {
@@ -22,7 +22,7 @@
     "android/build.gradle",
     "icon"
   ],
-  "nativeContract": 8,
+  "nativeContract": 9,
   "capacitor": {
     "ios": {
       "src": "ios"
@@ -41,6 +41,7 @@
     "@capacitor/core": "8.5.3",
     "@capacitor/ios": "8.5.3",
     "@capacitor/keyboard": "8.0.6",
+    "@capacitor/push-notifications": "8.1.3",
     "@capacitor/splash-screen": "8.0.2",
     "@capawesome/capacitor-live-update": "8.7.1"
   }