freerasp-react-native 3.13.0 → 3.14.1

package/CHANGELOG.md

@@ -5,6 +5,61 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [3.14.1] - 2024-03-10
+
+- iOS SDK version:  6.8.0
+- Android SDK version: 14.0.1
+
+### React Native
+
+#### Fixed
+
+- Take Android targetSdkVersion, compileSdkVersion from plugin only
+
+## [3.14.0] - 2024-03-05
+
+- iOS SDK version:  6.8.0
+- Android SDK version: 14.0.1
+
+### React Native
+
+#### Added
+
+- `blockScreenCapture` method to block/unblock screen capture
+- `isScreenCaptureBlocked` method to get the current screen capture blocking status
+- New callbacks:
+    - `screenshot`: Detects when a screenshot is taken
+    - `screenRecording`: Detects when screen recording is active
+
+#### Changed
+
+- Raised Android compileSDK level to 35
+
+#### Fixed 
+
+- Compatibility issues with RN New Architecture
+- Added proguard rules for malware data serialization in release mode on Android
+
+### Android
+
+#### Added
+
+- Passive and active screenshot/screen recording protection
+
+#### Changed
+
+- Improved root detection
+
+#### Fixed
+
+- Proguard rules to address warnings from okhttp dependency
+
+### iOS
+
+#### Added
+
+- Passive Screenshot/Screen Recording detection
+
 ## [3.13.0] - 2024-12-20
 
 - iOS SDK version:  6.6.3

package/README.md

@@ -1,4 +1,4 @@
-![FreeRasp](https://raw.githubusercontent.com/talsec/Free-RASP-Community/master/visuals/freeRASPforRN.png)
+![FreeRasp](https://raw.githubusercontent.com/talsec/Free-RASP-Community/master/visuals/freeRASP.png)
 
 ![GitHub Repo stars](https://img.shields.io/github/stars/talsec/Free-RASP-Community?color=green) ![GitHub](https://img.shields.io/github/license/talsec/Free-RASP-Community) ![GitHub](https://img.shields.io/github/last-commit/talsec/Free-RASP-Community) ![Publisher](https://img.shields.io/pub/publisher/freerasp) [![42matters](https://42matters.com/badges/sdk-installations/talsec)](https://42matters.com/sdks/android/talsec)
 
@@ -8,7 +8,7 @@
 
 freeRASP for React Native is a mobile in-app protection and security monitoring plugin. It aims to cover the main aspects of RASP (Runtime App Self Protection) and application shielding.
 
-:loudspeaker: The official documentation has been moved to a new location. You can now find it [here](https://docs.talsec.app/docs-and-articles-portal). :loudspeaker:
+:loudspeaker: [The official documentation has been moved to a new location. You can now find it here](https://docs.talsec.app/docs-and-articles-portal). :loudspeaker:
 
 # Overview
 
@@ -54,6 +54,8 @@ After the integration of freeRASP, make sure you visit the [freeMalwareDetection
 
 Visit the [GitBook page](https://docs.talsec.app/freerasp) for comprehensive and up-to-date guides, tutorials, and technical documentation specifically for freeRASP. It serves as your go-to resource, offering everything from basic instructions to advanced tips and tricks to help you get the most out of the project.
 
+:loudspeaker: [The official documentation has been moved to a new location. You can now find it here](https://docs.talsec.app/docs-and-articles-portal). :loudspeaker:
+
 ## :link: Integration Guide
 
 For integrating freeRASP on the React Native platform, be sure to follow all the steps in the [Integration Guide](https://docs.talsec.app/freerasp/integration). This guide provides detailed instructions to help you achieve a smooth and efficient integration.

package/android/build.gradle

@@ -40,11 +40,11 @@ def getIntegerDefault(name) {
 }
 
 android {
-  compileSdkVersion getExtOrIntegerDefault("compileSdkVersion")
+  compileSdkVersion getIntegerDefault("compileSdkVersion")
 
   defaultConfig {
     minSdkVersion getIntegerDefault("minSdkVersion")
-    targetSdkVersion getExtOrIntegerDefault("targetSdkVersion")
+    targetSdkVersion getIntegerDefault("targetSdkVersion")
     buildConfigField "boolean", "IS_NEW_ARCHITECTURE_ENABLED", isNewArchitectureEnabled().toString()
   }
   buildTypes {
@@ -90,7 +90,7 @@ dependencies {
   implementation "com.facebook.react:react-native:$react_native_version"
   implementation "org.jetbrains.kotlin:kotlin-stdlib:$kotlin_version"
   implementation "org.jetbrains.kotlinx:kotlinx-serialization-json:1.4.1"
-  implementation "com.aheaditec.talsec.security:TalsecSecurity-Community-ReactNative:13.2.0"
+  implementation "com.aheaditec.talsec.security:TalsecSecurity-Community-ReactNative:14.0.1"
 }
 
 if (isNewArchitectureEnabled()) {

package/android/gradle.properties

@@ -1,6 +1,6 @@
 FreeraspReactNative_kotlinVersion=1.7.0
 FreeraspReactNative_minSdkVersion=23
-FreeraspReactNative_targetSdkVersion=31
-FreeraspReactNative_compileSdkVersion=33
+FreeraspReactNative_targetSdkVersion=35
+FreeraspReactNative_compileSdkVersion=35
 FreeraspReactNative_ndkversion=21.4.7075529
 FreeraspReactNative_reactNativeVersion=+

package/android/proguard-rules.pro

@@ -1,2 +1,10 @@
 -dontwarn java.lang.invoke.StringConcatFactory
 -keep class com.freeraspreactnative.FreeraspReactNativePackage { public *; }
+
+-if @kotlinx.serialization.Serializable class **
+-keep class <1> {
+    *;
+}
+
+-keep class com.freeraspreactnative.models.RNSuspiciousAppInfo$Companion
+-keep class com.freeraspreactnative.models.RNPackageInfo$Companion

package/android/src/main/java/com/freeraspreactnative/FreeraspReactNativeModule.kt

@@ -1,5 +1,6 @@
 package com.freeraspreactnative
 
+import android.os.Build
 import android.os.Handler
 import android.os.HandlerThread
 import android.os.Looper
@@ -31,11 +32,15 @@ class FreeraspReactNativeModule(private val reactContext: ReactApplicationContex
   private val listener = ThreatListener(FreeraspThreatHandler, FreeraspThreatHandler)
   private val lifecycleListener = object : LifecycleEventListener {
     override fun onHostResume() {
-      // do nothing
+      if (Build.VERSION.SDK_INT >= Build.VERSION_CODES.UPSIDE_DOWN_CAKE) {
+        currentActivity?.let { ScreenProtector.register(it) }
+      }
     }
 
     override fun onHostPause() {
-      // do nothing
+      if (Build.VERSION.SDK_INT >= Build.VERSION_CODES.UPSIDE_DOWN_CAKE) {
+        currentActivity?.let { ScreenProtector.unregister(it) }
+      }
     }
 
     override fun onHostDestroy() {
@@ -54,8 +59,7 @@ class FreeraspReactNativeModule(private val reactContext: ReactApplicationContex
 
   @ReactMethod
   fun talsecStart(
-    options: ReadableMap,
-    promise: Promise
+    options: ReadableMap, promise: Promise
   ) {
 
     try {
@@ -64,10 +68,18 @@ class FreeraspReactNativeModule(private val reactContext: ReactApplicationContex
       listener.registerListener(reactContext)
       runOnUiThread {
         Talsec.start(reactContext, config)
+        mainHandler.post {
+          talsecStarted = true
+          // This code must be called only AFTER Talsec.start
+          currentActivity?.let { activity ->
+            if (Build.VERSION.SDK_INT >= Build.VERSION_CODES.UPSIDE_DOWN_CAKE) {
+              ScreenProtector.register(activity)
+            }
+          }
+          promise.resolve("freeRASP started")
+        }
       }
 
-      promise.resolve("freeRASP started")
-
     } catch (e: Exception) {
       promise.reject("TalsecInitializationError", e.message, e)
     }
@@ -136,6 +148,43 @@ class FreeraspReactNativeModule(private val reactContext: ReactApplicationContex
     }
   }
 
+  /**
+   * Method Block/Unblock screen capture
+   * @param enable boolean for whether want to block or unblock the screen capture
+   */
+  @ReactMethod
+  fun blockScreenCapture(enable: Boolean, promise: Promise) {
+    val activity = currentActivity ?: run {
+      promise.reject(
+        "NativePluginError", "Cannot block screen capture, activity is null."
+      )
+      return
+    }
+
+    runOnUiThread {
+      try {
+        Talsec.blockScreenCapture(activity, enable)
+        promise.resolve("Screen capture is now ${if (enable) "Blocked" else "Enabled"}.")
+      } catch (e: Exception) {
+        promise.reject("NativePluginError", "Error in blockScreenCapture: ${e.message}")
+      }
+    }
+  }
+
+  /**
+   * Method Returns whether screen capture is blocked or not
+   * @return boolean for is screem capture blocked or not
+   */
+  @ReactMethod
+  fun isScreenCaptureBlocked(promise: Promise) {
+    try {
+      val isBlocked = Talsec.isScreenCaptureBlocked()
+      promise.resolve(isBlocked)
+    } catch (e: Exception) {
+      promise.reject("NativePluginError", "Error in isScreenCaptureBlocked: ${e.message}")
+    }
+  }
+
   private fun buildTalsecConfig(config: ReadableMap): TalsecConfig {
     val androidConfig = config.getMapThrowing("androidConfig")
     val packageName = androidConfig.getStringThrowing("packageName")
@@ -172,11 +221,12 @@ class FreeraspReactNativeModule(private val reactContext: ReactApplicationContex
 
     private lateinit var appReactContext: ReactApplicationContext
 
+    internal var talsecStarted = false
+
     private fun notifyListeners(threat: Threat) {
       val params = Arguments.createMap()
       params.putInt(THREAT_CHANNEL_KEY, threat.value)
-      appReactContext
-        .getJSModule(DeviceEventManagerModule.RCTDeviceEventEmitter::class.java)
+      appReactContext.getJSModule(DeviceEventManagerModule.RCTDeviceEventEmitter::class.java)
         .emit(THREAT_CHANNEL_NAME, params)
     }
 
@@ -196,8 +246,7 @@ class FreeraspReactNativeModule(private val reactContext: ReactApplicationContex
             MALWARE_CHANNEL_KEY, encodedSuspiciousApps
           )
 
-          appReactContext
-            .getJSModule(DeviceEventManagerModule.RCTDeviceEventEmitter::class.java)
+          appReactContext.getJSModule(DeviceEventManagerModule.RCTDeviceEventEmitter::class.java)
             .emit(THREAT_CHANNEL_NAME, params)
         }
       }

package/android/src/main/java/com/freeraspreactnative/FreeraspThreatHandler.kt

@@ -63,6 +63,14 @@ internal object FreeraspThreatHandler : ThreatListener.ThreatDetected, ThreatLis
     listener?.threatDetected(Threat.SystemVPN)
   }
 
+  override fun onScreenshotDetected() {
+    listener?.threatDetected(Threat.Screenshot)
+  }
+
+  override fun onScreenRecordingDetected() {
+    listener?.threatDetected(Threat.ScreenRecording)
+  }
+
   internal interface TalsecReactNative {
     fun threatDetected(threatType: Threat)
 

package/android/src/main/java/com/freeraspreactnative/ScreenProtector.kt

@@ -0,0 +1,164 @@
+package com.freeraspreactnative
+
+import android.annotation.SuppressLint
+import android.annotation.TargetApi
+import android.app.Activity
+import android.app.Activity.ScreenCaptureCallback
+import android.content.Context
+import android.content.pm.PackageManager
+import android.os.Build
+import android.util.Log
+import android.view.WindowManager.SCREEN_RECORDING_STATE_VISIBLE
+import androidx.annotation.RequiresApi
+import androidx.core.content.ContextCompat
+
+import com.aheaditec.talsec_security.security.api.Talsec
+import java.util.function.Consumer
+
+@RequiresApi(Build.VERSION_CODES.UPSIDE_DOWN_CAKE)
+internal object ScreenProtector {
+  private const val TAG = "TalsecScreenProtector"
+  private const val SCREEN_CAPTURE_PERMISSION = "android.permission.DETECT_SCREEN_CAPTURE"
+  private const val SCREEN_RECORDING_PERMISSION = "android.permission.DETECT_SCREEN_RECORDING"
+  private var registered = false
+  private val screenCaptureCallback = ScreenCaptureCallback { Talsec.onScreenshotDetected() }
+  private val screenRecordCallback: Consumer<Int> = Consumer<Int> { state ->
+    if (state == SCREEN_RECORDING_STATE_VISIBLE) {
+      Talsec.onScreenRecordingDetected()
+    }
+  }
+
+  /**
+   * Registers screenshot and screen recording detector with the given activity
+   *
+   * **IMPORTANT**: android.permission.DETECT_SCREEN_CAPTURE and
+   * android.permission.DETECT_SCREEN_RECORDING must be
+   * granted for the app in the AndroidManifest.xml
+   */
+  internal fun register(activity: Activity) {
+    if (!FreeraspReactNativeModule.talsecStarted || registered) {
+      return
+    }
+
+    if (Build.VERSION.SDK_INT >= Build.VERSION_CODES.UPSIDE_DOWN_CAKE) {
+      registerScreenCapture(activity)
+    }
+
+    if (Build.VERSION.SDK_INT >= Build.VERSION_CODES.VANILLA_ICE_CREAM) {
+      registerScreenRecording(activity)
+    }
+    registered = true
+  }
+
+  /**
+   * Register Talsec Screen Capture (screenshot) Detector for given activity instance.
+   * The MainActivity of the app is registered by the plugin itself, other
+   * activities bust be registered manually as described in the integration guide.
+   *
+   * Missing permission is suppressed because the decision to use the screen
+   * capture API is made by developer, and not enforced by the library.
+   *
+   * **IMPORTANT**: android.permission.DETECT_SCREEN_CAPTURE (API 34+) must be
+   * granted for the app in the AndroidManifest.xml
+   */
+  @RequiresApi(Build.VERSION_CODES.UPSIDE_DOWN_CAKE)
+  @SuppressLint("MissingPermission")
+  private fun registerScreenCapture(activity: Activity) {
+    val context = activity.applicationContext
+    if (!hasPermission(context, SCREEN_CAPTURE_PERMISSION)) {
+      reportMissingPermission("screenshot", SCREEN_CAPTURE_PERMISSION)
+      return
+    }
+
+    activity.registerScreenCaptureCallback(context.mainExecutor, screenCaptureCallback)
+  }
+
+  /**
+   * Register Talsec Screen Recording Detector for given activity instance.
+   * The MainActivity of the app is registered by the plugin itself, other
+   * activities bust be registered manually as described in the integration guide.
+   *
+   * Missing permission is suppressed because the decision to use the screen
+   * capture API is made by developer, and not enforced by the library.
+   *
+   * **IMPORTANT**: android.permission.DETECT_SCREEN_RECORDING (API 35+) must be
+   * granted for the app in the AndroidManifest.xml
+   */
+  @SuppressLint("MissingPermission")
+  @RequiresApi(Build.VERSION_CODES.VANILLA_ICE_CREAM)
+  private fun registerScreenRecording(activity: Activity) {
+    val context = activity.applicationContext
+    if (!hasPermission(context, SCREEN_RECORDING_PERMISSION)) {
+      reportMissingPermission("screen record", SCREEN_RECORDING_PERMISSION)
+      return
+    }
+
+    val initialState = activity.windowManager.addScreenRecordingCallback(
+      context.mainExecutor, screenRecordCallback
+    )
+    screenRecordCallback.accept(initialState)
+
+  }
+
+  /**
+   * Unregisters screenshot and screen recording detector with the given activity
+   *
+   * **IMPORTANT**: android.permission.DETECT_SCREEN_CAPTURE and
+   * android.permission.DETECT_SCREEN_RECORDING must be
+   * granted for the app in the AndroidManifest.xml
+   */
+  @SuppressLint("MissingPermission")
+  @RequiresApi(Build.VERSION_CODES.UPSIDE_DOWN_CAKE)
+  internal fun unregister(activity: Activity) {
+    if (!FreeraspReactNativeModule.talsecStarted || !registered) {
+      return
+    }
+
+    if (Build.VERSION.SDK_INT >= Build.VERSION_CODES.UPSIDE_DOWN_CAKE) {
+      unregisterScreenCapture(activity)
+    }
+
+    if (Build.VERSION.SDK_INT >= Build.VERSION_CODES.VANILLA_ICE_CREAM) {
+      unregisterScreenRecording(activity)
+    }
+    registered = false
+  }
+
+  // Missing permission is suppressed because the decision to use the screen capture API is made
+  // by developer, and not enforced by the library.
+  @SuppressLint("MissingPermission")
+  @RequiresApi(Build.VERSION_CODES.UPSIDE_DOWN_CAKE)
+  private fun unregisterScreenCapture(activity: Activity) {
+    val context = activity.applicationContext
+    if (!hasPermission(context, SCREEN_CAPTURE_PERMISSION)) {
+      return
+    }
+    activity.unregisterScreenCaptureCallback(screenCaptureCallback)
+  }
+
+  // Missing permission is suppressed because the decision to use the screen capture API is made
+  // by developer, and not enforced by the library.
+  @SuppressLint("MissingPermission")
+  @RequiresApi(Build.VERSION_CODES.VANILLA_ICE_CREAM)
+  private fun unregisterScreenRecording(activity: Activity) {
+    val context = activity.applicationContext
+    if (!hasPermission(context, SCREEN_RECORDING_PERMISSION)) {
+      return
+    }
+
+    activity.windowManager?.removeScreenRecordingCallback(screenRecordCallback)
+  }
+
+  private fun hasPermission(context: Context, permission: String): Boolean {
+    return ContextCompat.checkSelfPermission(
+      context, permission
+    ) == PackageManager.PERMISSION_GRANTED
+  }
+
+  private fun reportMissingPermission(protectionType: String, permission: String) {
+    Log.e(
+      TAG,
+      "Failed to register $protectionType callback. Check if $permission permission is granted in AndroidManifest.xml"
+    )
+  }
+}

package/android/src/main/java/com/freeraspreactnative/Threat.kt

@@ -25,6 +25,8 @@ internal sealed class Threat(val value: Int) {
   object DevMode : Threat((10000..999999999).random())
   object Malware : Threat((10000..999999999).random())
   object ADBEnabled : Threat((10000..999999999).random())
+  object Screenshot : Threat((10000..999999999).random())
+  object ScreenRecording : Threat((10000..999999999).random())
 
   companion object {
     internal fun getThreatValues(): WritableArray {
@@ -43,7 +45,9 @@ internal sealed class Threat(val value: Int) {
           ObfuscationIssues.value,
           DevMode.value,
           Malware.value,
-          ADBEnabled.value
+          ADBEnabled.value,
+          Screenshot.value,
+          ScreenRecording.value
         )
       )
     }

package/android/src/main/java/com/freeraspreactnative/utils/Extensions.kt

@@ -61,7 +61,7 @@ internal fun ReadableMap.getNestedArraySafe(key: String): Array<Array<String>> {
   if (this.hasKey(key)) {
     val inputArray = this.getArray(key)!!
     for (i in 0 until inputArray.size()) {
-      outArray.add(inputArray.getArray(i).toPrimitiveArray())
+      inputArray.getArray(i)?.let { outArray.add(it.toPrimitiveArray()) }
     }
   }
   return outArray.toTypedArray()

package/example/Gemfile

@@ -1,6 +1,10 @@
 source 'https://rubygems.org'
 
 # You may use http://rbenv.org/ or https://rvm.io/ to install and use this version
-ruby '2.7.5'
+ruby ">= 2.6.10"
 
-gem 'cocoapods', '~> 1.11', '>= 1.11.2'
+# Exclude problematic versions of cocoapods and activesupport that causes build failures.
+gem 'cocoapods', '>= 1.13', '!= 1.15.0', '!= 1.15.1'
+gem 'activesupport', '>= 6.1.7.5', '!= 7.1.0'
+gem 'xcodeproj', '< 1.26.0'
+gem 'concurrent-ruby', '< 1.3.4'

package/example/Gemfile.lock

@@ -0,0 +1,121 @@
+GEM
+  remote: https://rubygems.org/
+  specs:
+    CFPropertyList (3.0.7)
+      base64
+      nkf
+      rexml
+    activesupport (7.1.5.1)
+      base64
+      benchmark (>= 0.3)
+      bigdecimal
+      concurrent-ruby (~> 1.0, >= 1.0.2)
+      connection_pool (>= 2.2.5)
+      drb
+      i18n (>= 1.6, < 2)
+      logger (>= 1.4.2)
+      minitest (>= 5.1)
+      mutex_m
+      securerandom (>= 0.3)
+      tzinfo (~> 2.0)
+    addressable (2.8.7)
+      public_suffix (>= 2.0.2, < 7.0)
+    algoliasearch (1.27.5)
+      httpclient (~> 2.8, >= 2.8.3)
+      json (>= 1.5.1)
+    atomos (0.1.3)
+    base64 (0.2.0)
+    benchmark (0.4.0)
+    bigdecimal (3.1.9)
+    claide (1.1.0)
+    cocoapods (1.15.2)
+      addressable (~> 2.8)
+      claide (>= 1.0.2, < 2.0)
+      cocoapods-core (= 1.15.2)
+      cocoapods-deintegrate (>= 1.0.3, < 2.0)
+      cocoapods-downloader (>= 2.1, < 3.0)
+      cocoapods-plugins (>= 1.0.0, < 2.0)
+      cocoapods-search (>= 1.0.0, < 2.0)
+      cocoapods-trunk (>= 1.6.0, < 2.0)
+      cocoapods-try (>= 1.1.0, < 2.0)
+      colored2 (~> 3.1)
+      escape (~> 0.0.4)
+      fourflusher (>= 2.3.0, < 3.0)
+      gh_inspector (~> 1.0)
+      molinillo (~> 0.8.0)
+      nap (~> 1.0)
+      ruby-macho (>= 2.3.0, < 3.0)
+      xcodeproj (>= 1.23.0, < 2.0)
+    cocoapods-core (1.15.2)
+      activesupport (>= 5.0, < 8)
+      addressable (~> 2.8)
+      algoliasearch (~> 1.0)
+      concurrent-ruby (~> 1.1)
+      fuzzy_match (~> 2.0.4)
+      nap (~> 1.0)
+      netrc (~> 0.11)
+      public_suffix (~> 4.0)
+      typhoeus (~> 1.0)
+    cocoapods-deintegrate (1.0.5)
+    cocoapods-downloader (2.1)
+    cocoapods-plugins (1.0.0)
+      nap
+    cocoapods-search (1.0.1)
+    cocoapods-trunk (1.6.0)
+      nap (>= 0.8, < 2.0)
+      netrc (~> 0.11)
+    cocoapods-try (1.2.0)
+    colored2 (3.1.2)
+    concurrent-ruby (1.3.3)
+    connection_pool (2.5.0)
+    drb (2.2.1)
+    escape (0.0.4)
+    ethon (0.16.0)
+      ffi (>= 1.15.0)
+    ffi (1.17.1)
+    fourflusher (2.3.1)
+    fuzzy_match (2.0.4)
+    gh_inspector (1.1.3)
+    httpclient (2.9.0)
+      mutex_m
+    i18n (1.14.7)
+      concurrent-ruby (~> 1.0)
+    json (2.10.1)
+    logger (1.6.6)
+    minitest (5.25.4)
+    molinillo (0.8.0)
+    mutex_m (0.3.0)
+    nanaimo (0.3.0)
+    nap (1.1.0)
+    netrc (0.11.0)
+    nkf (0.2.0)
+    public_suffix (4.0.7)
+    rexml (3.4.1)
+    ruby-macho (2.5.1)
+    securerandom (0.3.2)
+    typhoeus (1.4.1)
+      ethon (>= 0.9.0)
+    tzinfo (2.0.6)
+      concurrent-ruby (~> 1.0)
+    xcodeproj (1.25.1)
+      CFPropertyList (>= 2.3.3, < 4.0)
+      atomos (~> 0.1.3)
+      claide (>= 1.0.2, < 2.0)
+      colored2 (~> 3.1)
+      nanaimo (~> 0.3.0)
+      rexml (>= 3.3.6, < 4.0)
+
+PLATFORMS
+  ruby
+
+DEPENDENCIES
+  activesupport (>= 6.1.7.5, != 7.1.0)
+  cocoapods (>= 1.13, != 1.15.1, != 1.15.0)
+  concurrent-ruby (< 1.3.4)
+  xcodeproj (< 1.26.0)
+
+RUBY VERSION
+   ruby 2.7.6p219
+
+BUNDLED WITH
+   2.1.4