freeRASP 8.2.0 (#62)

* feat: init update

* add execution state ui

* raise version

* update linter

* update import

* fix: types exporting

* fix tsc script

* update android sdk

* remove overlay code

* fix android listener registration

* fix overflow in example app

* request user permissions in example app

* update ios sdk

* chore: update deps

* fix ios plugin init

* docs: add changelog

* feat: add killOnBypass

* chore: update example app

* prettier fix

* update npmignore

* add permissions to malware

* chore: update example tsconfig

* chore: format malware component

* format .kt sources

* remove spaces

* remove unused eeslint rule

Author: tompsota

.eslintignore

@@ -19,8 +19,8 @@ module.exports = {
   rules: {
     'no-console': process.env.NODE_ENV === 'production' ? 'warn' : 'off',
     'no-debugger': process.env.NODE_ENV === 'production' ? 'warn' : 'off',
-    '@typescript-eslint/ban-ts-comment': 'off',
     '@typescript-eslint/no-explicit-any': 'off',
+    '@typescript-eslint/ban-ts-comment': 'off',
     '@typescript-eslint/no-unused-vars': 'off',
   },
 };

.eslintrc.js

@@ -3,7 +3,7 @@ config.example.json
 *.zip
 *.tgz
 scripts/
-www/talsec.ts   
+www/src/
 
 # OSX
 #

.npmignore

@@ -1,4 +1,4 @@
-example/www
-example/plugins
-example/platforms
-example/dist
+**/plugins/
+**/platforms/
+**/dist/
+example/www/

.prettierignore

@@ -5,6 +5,65 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [8.2.0] - 2026-02-03
+
+- Android SDK version: 17.0.1
+- iOS SDK version: 6.13.0
+
+### Cordova
+
+#### Added
+
+- Added `killOnBypass` to `TalsecConfig` that configures if the app should be terminated when the threat callbacks are suppressed/hooked by an attacker (Android only) ([Issue 65](https://github.com/talsec/Free-RASP-Android/issues/65))
+- Added API for `timeSpoofing` callback into `ThreatEventActions` (Android only)
+- Added API for `unsecureWifi` callback into `ThreatEventActions` (Android only)
+- Added API for `allChecksFinished` callback into new `RaspExecutionStateEventActions` object
+- Added matched permissions to `SuspiciousAppInfo` object when malware detection reason is `suspiciousPermission`
+
+#### Changed
+
+- Changed deprecated initialize for pluginInitialize on Android
+- Improved the RASP listener registration
+
+#### Fixed
+
+- Resolved potential collision in threat identifiers
+
+### Android
+
+#### Added
+
+- Added `killOnBypass` method to the `TalsecConfig.Builder` that configures if the app should be terminated when the threat callbacks are suppressed/hooked by an attacker [Issue 65](https://github.com/talsec/Free-RASP-Android/issues/65)
+- We are introducing a new capability, detecting whether the device time has been tampered with (`timeSpoofing`)
+- We are introducing a new capability, detecting whether the location is being spoofed on the device (`locationSpoofing`)
+- We are introducing a new capability, detection of unsecure WiFi (`unecureWifi`)
+- Removed deprecated functionality `Pbkdf2Native` and both related native libraries (`libpbkdf2_native.so` and `libpolarssl.so`)
+- Added new `RaspExecutionState` which contains `onAllChecksFinished()` method, which is triggered after all checks are completed.
+- Added matched permissions to `SuspiciousAppInfo` object when malware detection reason is `suspiciousPermission`
+- New option to start Talsec, `Talsec.start()` takes new parameter `TalsecMode` that determines the dispatcher thread of initialization and sync checks (uses background thread by default)
+- Capability to check if another app has an option `REQUEST_INSTALL_PACKAGES` enabled in the system settings to malware detection
+
+#### Fixed
+
+- ANR issue caused by `registerScreenCaptureCallback()` method on the main thread
+- `NullPointerException` when checking key alias in Keystore on Android 7
+- `JaCoCo` issue causing `MethodTooLargeException` during instrumentation
+- `DeadApplicationException` when calling `Settings.Global.getInt` or `Settings.Secure.getInt` on invalid context
+- `AndroidKeyStore` crashes causing `java.util.concurrent.TimeoutException` when calling `finalize()` method on `Cipher` (GC issues)
+- Fixed issue with late initializers and `TalsecMode` coroutines scopes
+
+#### Changed
+
+- Shortened the value of threat detection interval
+- Refactoring of internal architecture of SDK that newly uses Coroutines to manage threading
+- Update of internal dependencies and security libraries
+
+### iOS
+
+#### Changed
+
+- Updated internal dependencies
+
 ## [8.1.1] - 2025-08-05
 
 ### Android

CHANGELOG.md

@@ -1,6 +1,6 @@
 <?xml version='1.0' encoding='utf-8'?>
 <widget id="io.ionic.starter" version="1.0.0" xmlns="http://www.w3.org/ns/widgets" xmlns:android="http://schemas.android.com/apk/res/android" xmlns:cdv="http://cordova.apache.org/ns/1.0">
-    <name>example</name>
+    <name>freeRASP:CDV</name>
     <description>An awesome Ionic/Cordova app.</description>
     <author email="support@talsec.app" href="http://talsec.app/">Talsec Team</author>
     <content src="index.html" />
@@ -25,19 +25,23 @@
         <config-file parent="/*" target="AndroidManifest.xml">
             <uses-permission android:name="android.permission.DETECT_SCREEN_CAPTURE" />
             <uses-permission android:name="android.permission.DETECT_SCREEN_RECORDING" />
+            <uses-permission android:name="android.permission.ACCESS_WIFI_STATE" />
+            <uses-permission android:name="android.permission.ACCESS_COARSE_LOCATION" />
+            <uses-permission android:name="android.permission.ACCESS_FINE_LOCATION" />
         </config-file>
         <resource-file src="resources/android/xml/network_security_config.xml" target="app/src/main/res/xml/network_security_config.xml" />
         <allow-intent href="market:*" />
         <icon src="resources/android/icon/drawable-hdpi-icon.png" />
     </platform>
     <platform name="ios">
+        <hook src="scripts/setIOSTarget.js" type="after_prepare" />
+        <resource-file src="resources/README.md" target="README.md" />
         <allow-intent href="itms:*" />
         <allow-intent href="itms-apps:*" />
         <icon src="resources/ios/icon/icon-20.png" width="20" />
     </platform>
     <plugin name="cordova-plugin-statusbar" spec="2.4.2" />
     <plugin name="cordova-plugin-device" spec="2.0.2" />
     <plugin name="cordova-plugin-splashscreen" spec="5.0.2" />
-    <plugin name="cordova-plugin-ionic-webview" spec="^5.0.0" />
     <plugin name="cordova-plugin-ionic-keyboard" spec="^2.0.5" />
 </widget>