Releases: talsec/Free-RASP-KMP
Releases · talsec/Free-RASP-KMP
1.1.0
[1.1.0] - 2025-03-25
- Android SDK version: 18.0.4
- iOS SDK version: 6.14.4
Kotlin Multiplatform
Added
- Added
raspExecutionStateEvents: SharedFlow<RaspExecutionStateEvent>toFreeraspKMP— a dedicated channel for RASP execution lifecycle events - Added
RaspExecutionStateEventsealed class withAllChecksFinishedevent, indicating that all security checks have completed - Added
FreeRaspEvent.Automationfor detecting automation frameworks (e.g. Appium) — Android only - Added
removeExternalId()toFreeraspKMP— removes a previously stored external ID - Added
permissionsfield toSuspiciousAppInfo
Changed
AllChecksFinishedmoved fromFreeRaspEventtoRaspExecutionStateEvent— breaking change, update your event handling accordinglystoreExternalId()now throwsFreeraspKMPExceptionon failure instead of silently failing — breaking change
Fixed
- Fixed
whitelistedInstallationSourcesnot being correctly passed to the native Android config
Android
Added
- Added Automation detection for detecting automation frameworks (e.g. Appium)
- Added new detection check for KernelSU
- Added wireless ADB detection to existing ADB detections
Changed
- Improved
HMAand root detection capabilities
Fixed
- Fixed memory management issues in the native code
- Patched possibility of
getInstalledPackagesthrowingDeadSystemException - Patched possibility of
getNetworkCapabilitiesthrowingSecurityException - Fixed well-known issue of
Cipher.initthrowingKeyStoreConnectException
Removed
- Removed deprecated
monitoringfeature
iOS
Changed
- Improved
timeSpoofingdetection methods
Fixed
- Fixed new jailbreak checks false positives on iOS 14 and 13
- Fixed false positives with jailbreak on iOS 15 and 16
- Fixed issue with app crashing on screenshot/screen recording
- Fixed retrigger jailbreak issue on iOS 15 and 16
1.0.0
[1.0.0] - 2025-12-5
- Android SDK version: 17.0.0
- iOS SDK version: 6.13.0
Kotlin Multiplatform
Added
- Added
killOnBypasstofreeraspConfigthat configures if the app should be terminated when the threat callbacks are suppressed/hooked by an attacker (Android only) (Issue 65) - Added
onTimeSpoofingcallback toFreeRaspEventfor handlingFreeRaspEvent.TimeSpoofingthreat (Android only)- We are introducing a new capability, detecting whether the device time has been tampered with
- Added
onLocationSpoofingcallback toFreeRaspEventfor handlingFreeRaspEvent.LocationSpoofingthreat (Android only)- We are introducing a new capability, detecting whether the location is being spoofed on the device.
- Added
onUnsecureWificallback toFreeRaspEventfor handlingFreeRaspEvent.UnsecureWifithreat (Android only)- We are introducing a new capability, detecting whether the device is connected to an unsecured Wi-Fi network.
- Added
onAllChecksFinishedcallback toFreeRaspEvent- We are introducing a new callback that notifies when all security checks have been completed.
Android
Removed
- Removed deprecated functionality
Pbkdf2Nativeand both related native libraries (libpbkdf2_native.soandlibpolarssl.so)
Changed
- Updated internal dependencies
iOS
Changed
- Updated internal dependencies