freerasp-react-native 3.7.1-1 → 3.8.0

package/CHANGELOG.md

@@ -1,3 +1,26 @@
+# freeRASP 3.8.0
+
+- ⚡ Added new threat `systemVPN` for VPN detection
+- 📄 Documentation updates
+
+### Android
+
+- ⚡ Added new threat `devMode` for Developer mode detection
+- ⚡ Enhanced and accelerated the data collection logic
+- ⚡ Fixed proguard warning in specific versions of RN
+- ⚡ Fixed issue with Arabic alphabet in logs caused by the device’s default system locale
+- ✔️ Increased the version of the GMS dependency
+- ✔️ Updated CA bundle
+
+### iOS
+- ⚡ Fixed issue with Arabic alphabet in logs caused by the device’s default system locale
+- ⚡ Passcode check is now periodical
+- ✔️ Updated CA bundle
+
+# freeRASP 3.7.2
+
+- ⚡ Update expo config plugin to fix release build issue in RN 0.73
+
 # freeRASP 3.7.1
 
 ### Android

package/README.md

@@ -1,6 +1,8 @@
 ![FreeRasp](https://raw.githubusercontent.com/talsec/Free-RASP-Community/master/visuals/freeRASPforRN.png)
 
-![GitHub Repo stars](https://img.shields.io/github/stars/talsec/Free-RASP-Community?color=green) ![GitHub](https://img.shields.io/github/license/talsec/Free-RASP-Community) ![GitHub](https://img.shields.io/github/last-commit/talsec/Free-RASP-Community) ![Publisher](https://img.shields.io/pub/publisher/freerasp) [![42matters](https://42matters.com/badges/sdk-installations/freerasp)](https://42matters.com/sdks/android/freerasp)
+![GitHub Repo stars](https://img.shields.io/github/stars/talsec/Free-RASP-Community?color=green) ![GitHub](https://img.shields.io/github/license/talsec/Free-RASP-Community) ![GitHub](https://img.shields.io/github/last-commit/talsec/Free-RASP-Community) ![Publisher](https://img.shields.io/pub/publisher/freerasp) [![42matters](https://42matters.com/badges/sdk-installations/talsec)](https://42matters.com/sdks/android/talsec)
+
+[<img src="https://assets.42matters.com/badges/2024/04/rising-star.svg?m=04" width="100"/>](https://42matters.com/sdks/android/talsec)
 
 # freeRASP for React Native
 
@@ -220,6 +222,10 @@ const actions = {
     console.log('secureHardwareNotAvailable');
   },
   // Android & iOS
+  systemVPN: () => {
+    console.log('systemVPN');
+  },
+  // Android & iOS
   passcode: () => {
     console.log('passcode');
   },
@@ -231,6 +237,10 @@ const actions = {
   obfuscationIssues: () => {
     console.log('obfuscationIssues');
   },
+  // Android only
+  devMode: () => {
+    console.log('devMode');
+  },
 };
 
 useFreeRasp(config, actions);
@@ -322,14 +332,16 @@ If you encounter any other issues, you can see the list of solved issues [here](
 freeRASP for React Native is bare React Native plugin. When installing freeRASP into a project that uses Expo SDK, there may be extra configuration needed. We provide plugin config that sets the dependencies automatically. It is recommended to use the plugin config. However, manual setup is also possible.
 
 ## Plugin config setup
-Add the plugin config into your `app.json` and specify the `minSdkVersion` (use at least 23):
+Add the plugin config into your `app.json` and specify the `minSdkVersion` (use at least 23).
+Additionally, if you are using Expo 50, increase version of R8 above 8.2 with the `R8Version` property [(to support sealed classes on Android)](https://github.com/talsec/Free-RASP-ReactNative/issues/60).
 ```json
 "plugins": [
       [
         "freerasp-react-native/app.plugin.js",
         {
           "android": {
-            "minSdkVersion": "23"
+            "minSdkVersion": "23",
+            "R8Version": "8.3.37" // optional for Expo 50
           }
         }
       ]
@@ -403,6 +415,15 @@ Go to `<your_project>/node_modules/freerasp-react-native/ios/TalsecRuntime.xcfra
 #define TALSECRUNTIME_SWIFT_H
 ```
 
+### Execution failed for task ':freerasp-react-native:minifyReleaseWithR8'.
+`Sealed classes are not supported as program classes when generating class files.`
+
+**Reason:**
+Kotlin sealed classes are not supported in AGP 8.1 used by some versions of RN (currently 0.73.x)
+
+**Solution:**
+Follow [this comment on Google Issue Tracker](https://issuetracker.google.com/issues/227160052#comment37), which contains also additional information about the issue.
+
 # Security Report
 
 The Security Report is a weekly summary describing the application's security state and characteristics of the devices it runs on in a practical and easy-to-understand way.
@@ -494,6 +515,8 @@ freeRASP is freemium software i.e. there is a Fair Usage Policy (FUP) that impos
                     <li>Screen lock control</li>
                     <li>Google Play Services enabled/disabled</li>
                     <li>Last security patch update</li>
+                    <li>System VPN control</li>
+                    <li>Developer mode control</li>
                 </ul>
             </td>
             <td>yes</td>

package/android/build.gradle

@@ -48,6 +48,7 @@ android {
   buildTypes {
     release {
       minifyEnabled true
+      proguardFiles "proguard-rules.pro"
     }
   }
 
@@ -86,7 +87,7 @@ dependencies {
   //noinspection GradleDynamicVersion
   implementation "com.facebook.react:react-native:$react_native_version"
   implementation "org.jetbrains.kotlin:kotlin-stdlib:$kotlin_version"
-  implementation "com.aheaditec.talsec.security:TalsecSecurity-Community-ReactNative:9.1.0"
+  implementation "com.aheaditec.talsec.security:TalsecSecurity-Community-ReactNative:9.6.0"
 }
 
 if (isNewArchitectureEnabled()) {

package/android/proguard-rules.pro

@@ -0,0 +1 @@
+-dontwarn java.lang.invoke.StringConcatFactory

package/android/src/main/java/com/freeraspreactnative/FreeraspThreatHandler.kt

@@ -46,6 +46,14 @@ internal object FreeraspThreatHandler : ThreatListener.ThreatDetected, ThreatLis
     listener?.threatDetected(Threat.SecureHardwareNotAvailable)
   }
 
+  override fun onDeveloperModeDetected() {
+    listener?.threatDetected(Threat.DevMode)
+  }
+
+  override fun onSystemVPNDetected() {
+    listener?.threatDetected(Threat.SystemVPN)
+  }
+
   internal interface TalsecReactNative {
     fun threatDetected(threatType: Threat)
   }

package/android/src/main/java/com/freeraspreactnative/Threat.kt

@@ -21,6 +21,8 @@ internal sealed class Threat(val value: Int) {
   object DeviceBinding : Threat((10000..999999999).random())
   object UnofficialStore : Threat((10000..999999999).random())
   object ObfuscationIssues : Threat((10000..999999999).random())
+  object SystemVPN : Threat((10000..999999999).random())
+  object DevMode : Threat((10000..999999999).random())
 
   companion object {
     internal fun getThreatValues(): WritableArray {
@@ -33,12 +35,13 @@ internal sealed class Threat(val value: Int) {
           Passcode.value,
           Simulator.value,
           SecureHardwareNotAvailable.value,
+          SystemVPN.value,
           DeviceBinding.value,
           UnofficialStore.value,
-          ObfuscationIssues.value
+          ObfuscationIssues.value,
+          DevMode.value
         )
       )
-
     }
   }
 }

package/example/index.d.ts

@@ -0,0 +1 @@
+declare module '*.png';

package/example/ios/FreeraspReactNativeExample.xcodeproj/project.pbxproj

@@ -582,6 +582,7 @@
 				GCC_PREPROCESSOR_DEFINITIONS = (
 					"DEBUG=1",
 					"$(inherited)",
+					_LIBCPP_ENABLE_CXX17_REMOVED_UNARY_BINARY_FUNCTION,
 				);
 				GCC_SYMBOLS_PRIVATE_EXTERN = NO;
 				GCC_WARN_64_TO_32_BIT_CONVERSION = YES;
@@ -608,6 +609,11 @@
 					"-DFOLLY_MOBILE=1",
 					"-DFOLLY_USE_LIBCPP=1",
 				);
+				OTHER_LDFLAGS = (
+					"$(inherited)",
+					"-Wl",
+					"-ld_classic",
+				);
 				REACT_NATIVE_PATH = "${PODS_ROOT}/../../node_modules/react-native";
 				SDKROOT = iphoneos;
 			};
@@ -649,6 +655,10 @@
 				"EXCLUDED_ARCHS[sdk=iphonesimulator*]" = i386;
 				GCC_C_LANGUAGE_STANDARD = gnu99;
 				GCC_NO_COMMON_BLOCKS = YES;
+				GCC_PREPROCESSOR_DEFINITIONS = (
+					"$(inherited)",
+					_LIBCPP_ENABLE_CXX17_REMOVED_UNARY_BINARY_FUNCTION,
+				);
 				GCC_WARN_64_TO_32_BIT_CONVERSION = YES;
 				GCC_WARN_ABOUT_RETURN_TYPE = YES_ERROR;
 				GCC_WARN_UNDECLARED_SELECTOR = YES;
@@ -672,6 +682,11 @@
 					"-DFOLLY_MOBILE=1",
 					"-DFOLLY_USE_LIBCPP=1",
 				);
+				OTHER_LDFLAGS = (
+					"$(inherited)",
+					"-Wl",
+					"-ld_classic",
+				);
 				REACT_NATIVE_PATH = "${PODS_ROOT}/../../node_modules/react-native";
 				SDKROOT = iphoneos;
 				VALIDATE_PRODUCT = YES;

package/example/package.json

@@ -6,7 +6,9 @@
     "android": "react-native run-android",
     "ios": "react-native run-ios",
     "start": "react-native start",
-    "pods": "pod-install --quiet"
+    "pods": "pod-install --quiet",
+    "build:android": "cd android && ./gradlew assembleDebug --no-daemon --console=plain -PreactNativeArchitectures=arm64-v8a",
+    "build:ios": "cd ios && xcodebuild -workspace FreeraspReactNativeExample.xcworkspace -scheme FreeraspReactNativeExample -configuration Debug -sdk iphonesimulator CC=clang CPLUSPLUS=clang++ LD=clang LDPLUSPLUS=clang++ GCC_OPTIMIZATION_LEVEL=0 GCC_PRECOMPILE_PREFIX_HEADER=YES ASSETCATALOG_COMPILER_OPTIMIZATION=time DEBUG_INFORMATION_FORMAT=dwarf COMPILER_INDEX_STORE_ENABLE=NO"
   },
   "dependencies": {
     "@react-native-material/core": "^1.3.7",
@@ -15,10 +17,13 @@
     "react-native-svg": "^13.8.0"
   },
   "devDependencies": {
-    "@babel/core": "^7.12.9",
+    "@babel/core": "^7.24.4",
     "@babel/runtime": "^7.24.1",
-    "babel-plugin-module-resolver": "^4.1.0",
+    "babel-plugin-module-resolver": "^5.0.0",
     "metro-react-native-babel-preset": "0.72.3",
     "react-native-svg-transformer": "^1.0.0"
+  },
+  "resolutions": {
+    "react-devtools-core": "^4.28.4"
   }
 }

package/example/src/App.tsx

@@ -101,6 +101,14 @@ const App = () => {
       );
     },
     // Android & iOS
+    systemVPN: () => {
+      setAppChecks((currentState) =>
+        currentState.map((threat) =>
+          threat.name === 'System VPN' ? { ...threat, status: 'nok' } : threat
+        )
+      );
+    },
+    // Android & iOS
     passcode: () => {
       setAppChecks((currentState) =>
         currentState.map((threat) =>
@@ -126,6 +134,16 @@ const App = () => {
         )
       );
     },
+    // Android only
+    devMode: () => {
+      setAppChecks((currentState) =>
+        currentState.map((threat) =>
+          threat.name === 'Developer Mode'
+            ? { ...threat, status: 'nok' }
+            : threat
+        )
+      );
+    },
   };
 
   useFreeRasp(config, actions);

package/example/src/checks.ts

@@ -1,15 +1,19 @@
 export const commonChecks = [
+  { name: 'App Integrity', status: 'ok' },
   { name: 'Privileged Access', status: 'ok' },
   { name: 'Debug', status: 'ok' },
-  { name: 'Simulator', status: 'ok' },
-  { name: 'App Integrity', status: 'ok' },
-  { name: 'Unofficial Store', status: 'ok' },
   { name: 'Hooks', status: 'ok' },
-  { name: 'Device Binding', status: 'ok' },
-  { name: 'Secure Hardware Not Available', status: 'ok' },
   { name: 'Passcode', status: 'ok' },
+  { name: 'Simulator', status: 'ok' },
+  { name: 'Secure Hardware Not Available', status: 'ok' },
+  { name: 'System VPN', status: 'ok' },
+  { name: 'Device Binding', status: 'ok' },
+  { name: 'Unofficial Store', status: 'ok' },
 ];
 
 export const iosChecks = [{ name: 'Device ID', status: 'ok' }];
 
-export const androidChecks = [{ name: 'Obfuscation Issues', status: 'ok' }];
+export const androidChecks = [
+  { name: 'Obfuscation Issues', status: 'ok' },
+  { name: 'Developer Mode', status: 'ok' },
+];