greenart7c3 482d6bb2c8 fix(I4): warn on explicit ws:// non-onion relays (GHSA-8844-q5vh-9j8f) ...

network_security_config.xml permits cleartext globally (deliberate, for
local/onion relays). EditRelaysDialog auto-prefixes ws:// only for .onion /
private IPs but accepts user-typed explicit ws:// URLs, which then carry
kind-24133 NIP-46 traffic (E2E ciphertext + metadata over cleartext). Add
an in-app warning below the relay text field when the user explicitly
types ws:// for a non-onion / non-private-network host, so cleartext relays
are opt-in and informed. Update the network_security_config comment to
document the deliberate global scope and the in-app warning.

2026-08-14 07:07:19 -03:00

..

com/greenart7c3/nostrsigner

fix(I4): warn on explicit ws:// non-onion relays (GHSA-8844-q5vh-9j8f)

2026-08-14 07:07:19 -03:00