security: encrypt credentials, caches, and harden lock screen

This commit is contained in:
2026-05-15 18:35:14 +05:00
parent 106004421e
commit fc031f1f2a
20 changed files with 506 additions and 149 deletions
+2
View File
@@ -36,6 +36,8 @@
<string name="biometric_prompt_subtitle">ފިންގަޕްރިންޓް ނުވަތަ މޫނު ބޭނުން ކޮށްގެން ހުޅުވާ</string>
<string name="biometric_negative_btn">PIN / ޕެޓަން ބޭނުން ކުރޭ</string>
<string name="unlock_failed">ދިމައެއް ނުވި — އަލުން ކަނޑޭ</string>
<string name="unlock_attempts_remaining">ދިމައެއް ނުވި — %d ފަހަރު ބާކީ</string>
<string name="unlock_locked_out">ވަރަށް ގިނަ ފަހަރު ނުކުރިހުރި. %d ސިކުންތު ފަހުން ލޮކް ހިލޭ.</string>
<!-- Security setup -->
<string name="security_setup">އެޕް ރައްކާތެރި ކުރޭ</string>
+2
View File
@@ -36,6 +36,8 @@
<string name="biometric_prompt_subtitle">Use your fingerprint or face to unlock</string>
<string name="biometric_negative_btn">Use PIN / Pattern</string>
<string name="unlock_failed">Incorrect — try again</string>
<string name="unlock_attempts_remaining">Incorrect — %d attempts remaining</string>
<string name="unlock_locked_out">Too many attempts. Try again in %d seconds.</string>
<!-- Security setup -->
<string name="security_setup">Secure Your App</string>
+10 -4
View File
@@ -6,8 +6,14 @@
See https://developer.android.com/about/versions/12/backup-restore
-->
<full-backup-content>
<!--
<include domain="sharedpref" path="."/>
<exclude domain="sharedpref" path="device.xml"/>
-->
<exclude domain="sharedpref" path="credential_store.xml"/>
<exclude domain="sharedpref" path="mib_prefs.xml"/>
<exclude domain="sharedpref" path="prefs.xml"/>
<exclude domain="sharedpref" path="account_cache.xml"/>
<exclude domain="sharedpref" path="contacts_cache.xml"/>
<exclude domain="sharedpref" path="financing_cache.xml"/>
<exclude domain="sharedpref" path="foreign_limits_cache.xml"/>
<exclude domain="sharedpref" path="recents_cache.xml"/>
<exclude domain="sharedpref" path="lock_attempts.xml"/>
<exclude domain="cache" path="."/>
</full-backup-content>
+20 -8
View File
@@ -5,15 +5,27 @@
-->
<data-extraction-rules>
<cloud-backup>
<!-- TODO: Use <include> and <exclude> to control what is backed up.
<include .../>
<exclude .../>
-->
<exclude domain="sharedpref" path="credential_store.xml"/>
<exclude domain="sharedpref" path="mib_prefs.xml"/>
<exclude domain="sharedpref" path="prefs.xml"/>
<exclude domain="sharedpref" path="account_cache.xml"/>
<exclude domain="sharedpref" path="contacts_cache.xml"/>
<exclude domain="sharedpref" path="financing_cache.xml"/>
<exclude domain="sharedpref" path="foreign_limits_cache.xml"/>
<exclude domain="sharedpref" path="recents_cache.xml"/>
<exclude domain="sharedpref" path="lock_attempts.xml"/>
<exclude domain="cache" path="."/>
</cloud-backup>
<!--
<device-transfer>
<include .../>
<exclude .../>
<exclude domain="sharedpref" path="credential_store.xml"/>
<exclude domain="sharedpref" path="mib_prefs.xml"/>
<exclude domain="sharedpref" path="prefs.xml"/>
<exclude domain="sharedpref" path="account_cache.xml"/>
<exclude domain="sharedpref" path="contacts_cache.xml"/>
<exclude domain="sharedpref" path="financing_cache.xml"/>
<exclude domain="sharedpref" path="foreign_limits_cache.xml"/>
<exclude domain="sharedpref" path="recents_cache.xml"/>
<exclude domain="sharedpref" path="lock_attempts.xml"/>
<exclude domain="cache" path="."/>
</device-transfer>
-->
</data-extraction-rules>
@@ -1,6 +1,2 @@
<?xml version="1.0" encoding="utf-8"?>
<network-security-config>
<domain-config cleartextTrafficPermitted="true">
<domain includeSubdomains="true">faisanet.mib.com.mv</domain>
</domain-config>
</network-security-config>
<network-security-config/>