- find-api-calls.sh: add missing '|| true' on the --paths inventory and --urls extraction pipelines; with set -euo pipefail a zero-match grep aborted the whole script (including the default --all run) with exit 1. - find-api-calls.sh: widen STRICT_URL to also match IPv4 literals, apex 2-label domains and bare single-label hosts followed by :port or /path (localhost, internal backends) while still rejecting dictionary-fragment noise from the Kotlin stdlib. - recover-kotlin-names.sh: sanitize the by_package/ filename with os.path.basename; a crafted absolute path in untrusted @DebugMetadata package names could otherwise escape the output directory. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| android-reverse-engineering | ||