Skip to content

feat: Migrate Branch 5 kit#666

Merged
denischilik merged 6 commits intoworkstation/6.0-Releasefrom
feat/SDKE-1019-Branch-5-Kit-Migrate
Mar 12, 2026
Merged

feat: Migrate Branch 5 kit#666
denischilik merged 6 commits intoworkstation/6.0-Releasefrom
feat/SDKE-1019-Branch-5-Kit-Migrate

Conversation

@denischilik
Copy link

Background

Migrates Branch 5 kit from git submodule to regular directory in the monorepo (kits/branch/branch-5).

What Has Changed

  • Kit relocated from submodule to kits/branch/branch-5
  • settings-kits.gradle updated with new path (replaced :kits:branch-kit)
  • Submodule removed from .gitmodules

Screenshots/Video

N/A

Checklist

  • I have performed a self-review of my own code.
  • I have made corresponding changes to the documentation.
  • I have added tests that prove my fix is effective or that my feature works.
  • I have tested this locally.

Additional Notes

@denischilik denischilik requested a review from a team as a code owner March 10, 2026 19:54
if (value != null) parseValueGuarded(value) else null
} catch (e: Exception) {
Log.e(LogTag("pParticle"), "Unable to parse value: $value")
Log.e(LogTag("pParticle"), "Unable to parse custom data value")
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Is this intentional?

Copy link
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yes, this is intentional. MobSF flagged this as android_kotlin_logging because $value can contain user-provided data

Comment on lines 30 to +33
- accept_self_signed_certificate
- android_manifest_well_known_assetlinks # Sample apps use third-party domains (e.g. Branch mp-fortune.app.link)
- android_task_hijacking1 # Sample apps; targetSdk in build.gradle
- android_task_hijacking2 # Sample apps; targetSdk in build.gradle
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Can we add just that kit's test app path to the ignore list?

Copy link
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

ignore-paths in mobsfscan doesn't exclude manifest files from scanning — they're checked separately. So we need to keep the ignore-rules for these three findings.

@denischilik denischilik requested a review from thomson-t March 11, 2026 17:38
- Remove sensitive value from CustomDataParser log (android_kotlin_logging)
- Add SampleApplication to ignore-paths and manifest rules to .mobsf
  (assetlinks, task hijacking for Branch sample app)

Made-with: Cursor
@denischilik denischilik force-pushed the feat/SDKE-1019-Branch-5-Kit-Migrate branch from 51ef8c3 to 9e1fc8a Compare March 11, 2026 17:42
@sonarqubecloud
Copy link

Quality Gate Failed Quality Gate failed

Failed conditions
3 Security Hotspots

See analysis details on SonarQube Cloud

@denischilik denischilik merged commit 46654ae into workstation/6.0-Release Mar 12, 2026
56 of 60 checks passed
@denischilik denischilik deleted the feat/SDKE-1019-Branch-5-Kit-Migrate branch March 12, 2026 14:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants