freerasp-react-native 3.7.2 → 3.8.0

package/CHANGELOG.md

@@ -1,3 +1,22 @@
+# freeRASP 3.8.0
+
+- ⚡ Added new threat `systemVPN` for VPN detection
+- 📄 Documentation updates
+
+### Android
+
+- ⚡ Added new threat `devMode` for Developer mode detection
+- ⚡ Enhanced and accelerated the data collection logic
+- ⚡ Fixed proguard warning in specific versions of RN
+- ⚡ Fixed issue with Arabic alphabet in logs caused by the device’s default system locale
+- ✔️ Increased the version of the GMS dependency
+- ✔️ Updated CA bundle
+
+### iOS
+- ⚡ Fixed issue with Arabic alphabet in logs caused by the device’s default system locale
+- ⚡ Passcode check is now periodical
+- ✔️ Updated CA bundle
+
 # freeRASP 3.7.2
 
 - ⚡ Update expo config plugin to fix release build issue in RN 0.73

package/README.md

@@ -222,6 +222,10 @@ const actions = {
     console.log('secureHardwareNotAvailable');
   },
   // Android & iOS
+  systemVPN: () => {
+    console.log('systemVPN');
+  },
+  // Android & iOS
   passcode: () => {
     console.log('passcode');
   },
@@ -233,6 +237,10 @@ const actions = {
   obfuscationIssues: () => {
     console.log('obfuscationIssues');
   },
+  // Android only
+  devMode: () => {
+    console.log('devMode');
+  },
 };
 
 useFreeRasp(config, actions);
@@ -507,6 +515,8 @@ freeRASP is freemium software i.e. there is a Fair Usage Policy (FUP) that impos
                     <li>Screen lock control</li>
                     <li>Google Play Services enabled/disabled</li>
                     <li>Last security patch update</li>
+                    <li>System VPN control</li>
+                    <li>Developer mode control</li>
                 </ul>
             </td>
             <td>yes</td>

package/android/build.gradle

@@ -48,6 +48,7 @@ android {
   buildTypes {
     release {
       minifyEnabled true
+      proguardFiles "proguard-rules.pro"
     }
   }
 
@@ -86,7 +87,7 @@ dependencies {
   //noinspection GradleDynamicVersion
   implementation "com.facebook.react:react-native:$react_native_version"
   implementation "org.jetbrains.kotlin:kotlin-stdlib:$kotlin_version"
-  implementation "com.aheaditec.talsec.security:TalsecSecurity-Community-ReactNative:9.1.0"
+  implementation "com.aheaditec.talsec.security:TalsecSecurity-Community-ReactNative:9.6.0"
 }
 
 if (isNewArchitectureEnabled()) {

package/android/proguard-rules.pro

@@ -0,0 +1 @@
+-dontwarn java.lang.invoke.StringConcatFactory

package/android/src/main/java/com/freeraspreactnative/FreeraspThreatHandler.kt

@@ -46,6 +46,14 @@ internal object FreeraspThreatHandler : ThreatListener.ThreatDetected, ThreatLis
     listener?.threatDetected(Threat.SecureHardwareNotAvailable)
   }
 
+  override fun onDeveloperModeDetected() {
+    listener?.threatDetected(Threat.DevMode)
+  }
+
+  override fun onSystemVPNDetected() {
+    listener?.threatDetected(Threat.SystemVPN)
+  }
+
   internal interface TalsecReactNative {
     fun threatDetected(threatType: Threat)
   }

package/android/src/main/java/com/freeraspreactnative/Threat.kt

@@ -21,6 +21,8 @@ internal sealed class Threat(val value: Int) {
   object DeviceBinding : Threat((10000..999999999).random())
   object UnofficialStore : Threat((10000..999999999).random())
   object ObfuscationIssues : Threat((10000..999999999).random())
+  object SystemVPN : Threat((10000..999999999).random())
+  object DevMode : Threat((10000..999999999).random())
 
   companion object {
     internal fun getThreatValues(): WritableArray {
@@ -33,12 +35,13 @@ internal sealed class Threat(val value: Int) {
           Passcode.value,
           Simulator.value,
           SecureHardwareNotAvailable.value,
+          SystemVPN.value,
           DeviceBinding.value,
           UnofficialStore.value,
-          ObfuscationIssues.value
+          ObfuscationIssues.value,
+          DevMode.value
         )
       )
-
     }
   }
 }

package/example/index.d.ts

@@ -0,0 +1 @@
+declare module '*.png';

package/example/ios/FreeraspReactNativeExample.xcodeproj/project.pbxproj

@@ -582,6 +582,7 @@
 				GCC_PREPROCESSOR_DEFINITIONS = (
 					"DEBUG=1",
 					"$(inherited)",
+					_LIBCPP_ENABLE_CXX17_REMOVED_UNARY_BINARY_FUNCTION,
 				);
 				GCC_SYMBOLS_PRIVATE_EXTERN = NO;
 				GCC_WARN_64_TO_32_BIT_CONVERSION = YES;
@@ -608,6 +609,11 @@
 					"-DFOLLY_MOBILE=1",
 					"-DFOLLY_USE_LIBCPP=1",
 				);
+				OTHER_LDFLAGS = (
+					"$(inherited)",
+					"-Wl",
+					"-ld_classic",
+				);
 				REACT_NATIVE_PATH = "${PODS_ROOT}/../../node_modules/react-native";
 				SDKROOT = iphoneos;
 			};
@@ -649,6 +655,10 @@
 				"EXCLUDED_ARCHS[sdk=iphonesimulator*]" = i386;
 				GCC_C_LANGUAGE_STANDARD = gnu99;
 				GCC_NO_COMMON_BLOCKS = YES;
+				GCC_PREPROCESSOR_DEFINITIONS = (
+					"$(inherited)",
+					_LIBCPP_ENABLE_CXX17_REMOVED_UNARY_BINARY_FUNCTION,
+				);
 				GCC_WARN_64_TO_32_BIT_CONVERSION = YES;
 				GCC_WARN_ABOUT_RETURN_TYPE = YES_ERROR;
 				GCC_WARN_UNDECLARED_SELECTOR = YES;
@@ -672,6 +682,11 @@
 					"-DFOLLY_MOBILE=1",
 					"-DFOLLY_USE_LIBCPP=1",
 				);
+				OTHER_LDFLAGS = (
+					"$(inherited)",
+					"-Wl",
+					"-ld_classic",
+				);
 				REACT_NATIVE_PATH = "${PODS_ROOT}/../../node_modules/react-native";
 				SDKROOT = iphoneos;
 				VALIDATE_PRODUCT = YES;

package/example/package.json

@@ -6,7 +6,9 @@
     "android": "react-native run-android",
     "ios": "react-native run-ios",
     "start": "react-native start",
-    "pods": "pod-install --quiet"
+    "pods": "pod-install --quiet",
+    "build:android": "cd android && ./gradlew assembleDebug --no-daemon --console=plain -PreactNativeArchitectures=arm64-v8a",
+    "build:ios": "cd ios && xcodebuild -workspace FreeraspReactNativeExample.xcworkspace -scheme FreeraspReactNativeExample -configuration Debug -sdk iphonesimulator CC=clang CPLUSPLUS=clang++ LD=clang LDPLUSPLUS=clang++ GCC_OPTIMIZATION_LEVEL=0 GCC_PRECOMPILE_PREFIX_HEADER=YES ASSETCATALOG_COMPILER_OPTIMIZATION=time DEBUG_INFORMATION_FORMAT=dwarf COMPILER_INDEX_STORE_ENABLE=NO"
   },
   "dependencies": {
     "@react-native-material/core": "^1.3.7",
@@ -15,10 +17,13 @@
     "react-native-svg": "^13.8.0"
   },
   "devDependencies": {
-    "@babel/core": "^7.12.9",
+    "@babel/core": "^7.24.4",
     "@babel/runtime": "^7.24.1",
-    "babel-plugin-module-resolver": "^4.1.0",
+    "babel-plugin-module-resolver": "^5.0.0",
     "metro-react-native-babel-preset": "0.72.3",
     "react-native-svg-transformer": "^1.0.0"
+  },
+  "resolutions": {
+    "react-devtools-core": "^4.28.4"
   }
 }

package/example/src/App.tsx

@@ -101,6 +101,14 @@ const App = () => {
       );
     },
     // Android & iOS
+    systemVPN: () => {
+      setAppChecks((currentState) =>
+        currentState.map((threat) =>
+          threat.name === 'System VPN' ? { ...threat, status: 'nok' } : threat
+        )
+      );
+    },
+    // Android & iOS
     passcode: () => {
       setAppChecks((currentState) =>
         currentState.map((threat) =>
@@ -126,6 +134,16 @@ const App = () => {
         )
       );
     },
+    // Android only
+    devMode: () => {
+      setAppChecks((currentState) =>
+        currentState.map((threat) =>
+          threat.name === 'Developer Mode'
+            ? { ...threat, status: 'nok' }
+            : threat
+        )
+      );
+    },
   };
 
   useFreeRasp(config, actions);

package/example/src/checks.ts

@@ -1,15 +1,19 @@
 export const commonChecks = [
+  { name: 'App Integrity', status: 'ok' },
   { name: 'Privileged Access', status: 'ok' },
   { name: 'Debug', status: 'ok' },
-  { name: 'Simulator', status: 'ok' },
-  { name: 'App Integrity', status: 'ok' },
-  { name: 'Unofficial Store', status: 'ok' },
   { name: 'Hooks', status: 'ok' },
-  { name: 'Device Binding', status: 'ok' },
-  { name: 'Secure Hardware Not Available', status: 'ok' },
   { name: 'Passcode', status: 'ok' },
+  { name: 'Simulator', status: 'ok' },
+  { name: 'Secure Hardware Not Available', status: 'ok' },
+  { name: 'System VPN', status: 'ok' },
+  { name: 'Device Binding', status: 'ok' },
+  { name: 'Unofficial Store', status: 'ok' },
 ];
 
 export const iosChecks = [{ name: 'Device ID', status: 'ok' }];
 
-export const androidChecks = [{ name: 'Obfuscation Issues', status: 'ok' }];
+export const androidChecks = [
+  { name: 'Obfuscation Issues', status: 'ok' },
+  { name: 'Developer Mode', status: 'ok' },
+];