openclaw/apps/ios/Sources
Agustin Rivera 49d08382a9
iOS: restrict A2UI action dispatch to trusted canvas URLs (#58471)
* fix(ios): restrict a2ui bridge trust

* test(ios): cover fragment-strip trust and document raw-string equality

* fix(ios): normalize capability URL before trust comparison in canvas commands

* fix(ios): trim canvas.navigate url before trust comparison

* chore: add changelog for iOS A2UI trust boundary

---------

Co-authored-by: Devin Robison <drobison@nvidia.com>
2026-04-02 11:51:09 -06:00
..
Assets.xcassets/AppIcon.appiconset feat(ios): surface gateway talk defaults and refresh icon assets (#22530) 2026-02-21 10:34:20 +02:00
Calendar refactor(ios): share EventKit auth gating 2026-02-15 20:24:06 +00:00
Camera iOS Security Stack 2/5: Concurrency Locks (#33241) 2026-03-03 16:28:27 +00:00
Capabilities iOS: alpha node app + setup-code onboarding (#11756) 2026-02-08 18:08:13 +01:00
Chat Chat UI: tighten compact transport handling 2026-03-24 10:58:09 -07:00
Contacts refactor(ios): dedupe status, gateway, and service flows 2026-03-02 11:32:20 +00:00
Device fix(ios): enforce main-actor device status APIs 2026-03-02 04:36:49 +00:00
EventKit refactor(ios): share EventKit auth gating 2026-02-15 20:24:06 +00:00
Gateway fix(pairing): restore qr bootstrap onboarding handoff (#58382) (thanks @ngutman) 2026-03-31 21:11:35 +03:00
LiveActivity fix(ios): mark activitykit import as preconcurrency (#57180) 2026-03-29 21:24:25 +03:00
Location fix(swift): align async helper callsites across iOS and macOS 2026-03-03 03:07:54 +00:00
Media iOS: alpha node app + setup-code onboarding (#11756) 2026-02-08 18:08:13 +01:00
Model iOS: restrict A2UI action dispatch to trusted canvas URLs (#58471) 2026-04-02 11:51:09 -06:00
Motion fix(ios): eliminate Swift warnings and clean build logs 2026-02-26 22:42:23 +00:00
Onboarding iOS: improve QR pairing flow (#51359) 2026-03-21 01:10:29 -05:00
Push feat(push): add iOS APNs relay gateway (#43369) 2026-03-12 18:15:35 +02:00
Reminders fix(ios): eliminate Swift warnings and clean build logs 2026-02-26 22:42:23 +00:00
Screen iOS: restrict A2UI action dispatch to trusted canvas URLs (#58471) 2026-04-02 11:51:09 -06:00
Services fix(ios): harden watch messaging activation concurrency (#33306) 2026-03-03 22:38:54 +00:00
Settings fix(pairing): restore qr bootstrap onboarding handoff (#58382) (thanks @ngutman) 2026-03-31 21:11:35 +03:00
Status iOS: add welcome home canvas 2026-03-10 21:44:00 +02:00
Voice refactor: split talk gateway config loaders 2026-03-08 16:22:48 +00:00
HomeToolbar.swift feat(ios): refresh home canvas toolbar 2026-03-10 21:44:00 +02:00
Info.plist feat(push): add iOS APNs relay gateway (#43369) 2026-03-12 18:15:35 +02:00
OpenClaw.entitlements iOS: add APNs registration and notification signing config (#20308) 2026-02-18 19:37:03 +00:00
OpenClawApp.swift feat(push): add iOS APNs relay gateway (#43369) 2026-03-12 18:15:35 +02:00
RootCanvas.swift feat(ios): refresh home canvas toolbar 2026-03-10 21:44:00 +02:00
RootTabs.swift refactor(ios): dedupe status, gateway, and service flows 2026-03-02 11:32:20 +00:00
RootView.swift iOS: alpha node app + setup-code onboarding (#11756) 2026-02-08 18:08:13 +01:00
SessionKey.swift iOS: alpha node app + setup-code onboarding (#11756) 2026-02-08 18:08:13 +01:00