io.appium.settings 8.0.8 → 8.0.10

package/CHANGELOG.md

@@ -1,3 +1,15 @@
+## [8.0.10](https://github.com/appium/io.appium.settings/compare/v8.0.9...v8.0.10) (2026-09-26)
+
+### Bug Fixes
+
+* quote media scan destination paths ([#321](https://github.com/appium/io.appium.settings/issues/321)) ([71c90d0](https://github.com/appium/io.appium.settings/commit/71c90d09fb3e0cae33b20749217df593eb630d57))
+
+## [8.0.9](https://github.com/appium/io.appium.settings/compare/v8.0.8...v8.0.9) (2026-08-25)
+
+### Miscellaneous Chores
+
+* **deps:** bump gradle-wrapper from 9.7.0 to 9.7.1 ([#316](https://github.com/appium/io.appium.settings/issues/316)) ([e807f0e](https://github.com/appium/io.appium.settings/commit/e807f0ecefe9e525e0dbbfbc375799ae38bf96ed))
+
 ## [8.0.8](https://github.com/appium/io.appium.settings/compare/v8.0.7...v8.0.8) (2026-08-12)
 
 ### Bug Fixes

package/README.md

@@ -9,6 +9,26 @@ Toggle settings in Android device or emulator.
 
 A small and simple Android application that deals with the system settings. Then the application shuts down.
 
+## Trusted test environment
+
+Appium Settings is intended for dedicated test devices and emulators with trusted
+applications. Its exported broadcast receivers support ADB and external automation
+tools; they do not authenticate callers or provide isolation from malicious apps
+installed on the same device.
+
+In particular, granting Appium Settings `READ_SMS` allows other installed apps to
+request SMS data through its SMS receiver without holding `READ_SMS` themselves.
+When notification access is enabled and the service that registers the notification
+receiver is running, other installed apps can request buffered notification data
+without having notification access themselves. These requests happen on the device;
+network isolation alone does not prevent them.
+
+Use test data and avoid devices containing personal or confidential SMS messages or
+notifications. Grant only the permissions needed for your tests. When the helper is
+no longer needed, revoke its SMS permission and notification access, or uninstall it.
+Ending an Appium session should not be treated as revoking those grants or removing
+the helper.
+
 ## Requirements
 
 * [Android SDK](http://developer.android.com)
@@ -255,6 +275,11 @@ adb shell ime set com.google.android.inputmethod.latin/com.android.inputmethod.l
 
 ## Notifications
 
+**Trust requirement:** While notification access is enabled and the notification
+receiver is registered, other apps on the device can retrieve buffered notifications
+through this helper. See [Trusted test environment](#trusted-test-environment) before
+enabling this feature.
+
 Since version 2.16.0 Appium Settings supports retrieval of system notifications.
 You need to manually switch the corresponding security switcher next to `Appium Settings`
 application name in `Settings->Notification Access` (the path to this page under Settings
@@ -306,6 +331,10 @@ for more information on available notification properties and their values.
 
 ## SMS
 
+**Trust requirement:** Once this helper has `READ_SMS`, other apps on the device can
+request SMS data through its exported receiver without that permission themselves.
+See [Trusted test environment](#trusted-test-environment) before granting access.
+
 Since version 3.1 Appium Settings supports retrieval of SMS messages.
 Make sure the corresponding permission has been granted to the app
 in order to make this feature available. The next step would be to send

package/build/lib/commands/media.js

@@ -10,6 +10,6 @@ import { LOG_PREFIX } from '../logger.js';
  */
 export async function scanMedia(destination) {
     this.log.debug(LOG_PREFIX, `Scanning '${destination}' for media files`);
-    await this.checkBroadcast(['-n', MEDIA_SCAN_RECEIVER, '-a', MEDIA_SCAN_ACTION, '--es', 'path', destination], 'scan media');
+    await this.checkBroadcast(['-n', MEDIA_SCAN_RECEIVER, '-a', MEDIA_SCAN_ACTION, '--es', 'path', `'${destination.replace(/'/g, `'"'"'`)}'`], 'scan media');
 }
 //# sourceMappingURL=media.js.map

package/build/lib/commands/media.js.map

@@ -1 +1 @@
-{"version":3,"file":"media.js","sourceRoot":"","sources":["../../../lib/commands/media.ts"],"names":[],"mappings":"AACA,OAAO,EAAC,iBAAiB,EAAE,mBAAmB,EAAC,MAAM,iBAAiB,CAAC;AACvE,OAAO,EAAC,UAAU,EAAC,MAAM,cAAc,CAAC;AAExC;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAAoB,WAAmB;IACpE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,EAAE,aAAa,WAAW,mBAAmB,CAAC,CAAC;IACxE,MAAM,IAAI,CAAC,cAAc,CACvB,CAAC,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,iBAAiB,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,CAAC,EACjF,YAAY,CACb,CAAC;AACJ,CAAC"}
+{"version":3,"file":"media.js","sourceRoot":"","sources":["../../../lib/commands/media.ts"],"names":[],"mappings":"AACA,OAAO,EAAC,iBAAiB,EAAE,mBAAmB,EAAC,MAAM,iBAAiB,CAAC;AACvE,OAAO,EAAC,UAAU,EAAC,MAAM,cAAc,CAAC;AAExC;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAAoB,WAAmB;IACpE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,EAAE,aAAa,WAAW,mBAAmB,CAAC,CAAC;IACxE,MAAM,IAAI,CAAC,cAAc,CACvB,CAAC,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,iBAAiB,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,WAAW,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,EAC/G,YAAY,CACb,CAAC;AACJ,CAAC"}

package/lib/commands/media.ts

@@ -13,7 +13,7 @@ import {LOG_PREFIX} from '../logger.js';
 export async function scanMedia(this: SettingsApp, destination: string): Promise<void> {
   this.log.debug(LOG_PREFIX, `Scanning '${destination}' for media files`);
   await this.checkBroadcast(
-    ['-n', MEDIA_SCAN_RECEIVER, '-a', MEDIA_SCAN_ACTION, '--es', 'path', destination],
+    ['-n', MEDIA_SCAN_RECEIVER, '-a', MEDIA_SCAN_ACTION, '--es', 'path', `'${destination.replace(/'/g, `'"'"'`)}'`],
     'scan media',
   );
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "io.appium.settings",
-  "version": "8.0.8",
+  "version": "8.0.10",
   "description": "App for dealing with Android settings",
   "keywords": [
     "android",