From 37c11c6ec6ee25940281c95cbbe2a44ff9375e67 Mon Sep 17 00:00:00 2001 From: Claude Date: Mon, 16 Mar 2026 19:00:52 +0000 Subject: [PATCH] Restrict internet permissions and network deps to free flavor only - Add tools:node="remove" for INTERNET, CHANGE_NETWORK_STATE, and ACCESS_NETWORK_STATE in the offline manifest to explicitly strip any internet permissions injected by library AARs during manifest merge - Move coil-okhttp (OkHttp network backend for Coil) from implementation to freeImplementation; remove duplicate okhttpCoroutines plain dep - kmp-tor was already freeImplementation; this completes the isolation --- app/build.gradle | 5 ++--- app/src/offline/AndroidManifest.xml | 5 +++++ 2 files changed, 7 insertions(+), 3 deletions(-) diff --git a/app/build.gradle b/app/build.gradle index 6620ef41..e7a4fdc0 100644 --- a/app/build.gradle +++ b/app/build.gradle @@ -243,9 +243,8 @@ dependencies { implementation libs.coil.gif // view svgs implementation libs.coil.svg - // enables network for coil - implementation libs.coil.okhttp - implementation libs.okhttpCoroutines + // enables network for coil (free only — offline has no network stack) + freeImplementation libs.coil.okhttp implementation libs.storage diff --git a/app/src/offline/AndroidManifest.xml b/app/src/offline/AndroidManifest.xml index 269ea875..1b5ef245 100644 --- a/app/src/offline/AndroidManifest.xml +++ b/app/src/offline/AndroidManifest.xml @@ -2,6 +2,11 @@ + + + + +