react-native-device-defense 1.0.8 → 1.1.0

package/android/src/main/cpp/device-security.cpp

@@ -260,12 +260,7 @@ static bool checkSSLValidationBypass() {
                 LOGD("Found SSL validation bypass in %s", propFile.c_str());
                 return true;
             }
-            if (line.find("ro.debuggable") != std::string::npos &&
-                line.find("1") != std::string::npos) {
-                // Debuggable builds may have SSL validation bypassed
-                LOGD("Device is debuggable, SSL may be bypassed");
-                return true;
-            }
+
         }
     }
 
@@ -485,15 +480,9 @@ static bool performRootDetection() {
         return true;
     }
 
-    // Check system properties
-    if (checkSystemProperties()) {
-        return true;
-    }
-
-    // Check mount points
-    if (checkMountPoints()) {
-        return true;
-    }
+    // Check system properties and mount points are skipped here as they
+    // frequently cause false positives on unrooted userdebug/developer devices
+    // (e.g., when USB debugging is enabled).
 
     return false;
 }

package/android/src/main/java/com/devicedefense/RootDetection.kt

@@ -28,7 +28,15 @@ class RootDetection(private val context: Context) {
      */
     fun performDetection(): RootDetectionResult {
         val rootBeer = RootBeer(context)
-        val hasRootBeerDetected = rootBeer.isRooted
+        // Only use reliable RootBeer checks to avoid false positives (like checkForDangerousProps or checkForRWPaths)
+        val hasRootBeerDetected = rootBeer.detectRootManagementApps() || 
+                                  rootBeer.detectPotentiallyDangerousApps() || 
+                                  rootBeer.checkForSuBinary() || 
+                                  rootBeer.checkForBusyBoxBinary() || 
+                                  rootBeer.detectTestKeys() || 
+                                  rootBeer.checkSuExists() || 
+                                  rootBeer.checkForRootNative() || 
+                                  rootBeer.checkForMagiskBinary()
 
         // Native detection (JNI)
         val hasNativeRootDetected = NativeSecurityCheck.isRooted()
@@ -39,7 +47,7 @@ class RootDetection(private val context: Context) {
         // Check for root management apps
         val hasRootApps = checkRootApps()
 
-        // Check system properties
+        // Check system properties (keep for details, but don't use for blocking)
         val hasSystemPropsModified = checkSystemProperties()
 
         val details = mapOf(
@@ -54,11 +62,11 @@ class RootDetection(private val context: Context) {
             "dangerous_props" to checkDangerousSystemProperties()
         )
 
+        // Exclude system properties from the final isRooted flag to avoid false positives on userdebug/developer devices
         val isRooted = hasRootBeerDetected ||
                 hasNativeRootDetected ||
                 hasDangerousBins ||
-                hasRootApps ||
-                hasSystemPropsModified
+                hasRootApps
 
         return RootDetectionResult(
             isRooted = isRooted,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "react-native-device-defense",
-  "version": "1.0.8",
+  "version": "1.1.0",
   "description": "Multi-layer device security detection for React Native (root, hook, debugger, emulator detection)",
   "main": "lib/commonjs/index.js",
   "module": "lib/module/index.js",