D21247: [pretty please] allow fetching of cover art in mpdris plugin from connected computer

cotko cotko noreply at phabricator.kde.org
Thu May 16 23:27:56 BST 2019


cotko created this revision.
cotko added a reviewer: KDE Connect.
Herald added a project: KDE Connect.
Herald added a subscriber: kdeconnect.
cotko requested review of this revision.

REVISION SUMMARY
  So from android 8 onwards it appears that fetching content from "cleartext" urls is disabled by default
  
  https://stackoverflow.com/questions/45940861/android-8-cleartext-http-traffic-not-permitted
  
  I have a mpris service running on my local computer which is connected to the android, that service is also serving cover art for currently playing song. Obviously I can not have a domain set for my computer on a local machine, so cover art urls look like 
  `http://<ip>:<port>/<songid>.ext` . Since this restriction was introduced into android 8, kde connect is not able to fetch the art from this url.
  
  This is patch allows connections to raw IPs addresses as well. If there is any security issues regarding this change, I'm prepared to do more work, my suggestion would be to check if IP address in this case matches paired computer's IP address, although this would still be a bit annoying (especially since whatever malicious file can be served from a "cleartext" link as well).

TEST PLAN
  - start some sort of server which can serve an image on a paired computer
  - create mpris Player instance on a paired computer and set the `mpris:artUrl` to the served address where this image is available
  - open kde connect android app, select prepared player and see default cover art instead of the served image
  - change artUrl to some image from the web
  - check in kde connect again and see it correctly show a remote image

REPOSITORY
  R225 KDE Connect - Android application

REVISION DETAIL
  https://phabricator.kde.org/D21247

AFFECTED FILES
  AndroidManifest.xml
  res/xml/network_security_config.xml

To: cotko, #kde_connect
Cc: kdeconnect, ewentzel, dshelley, pawelkwiecinski, ctakano, vporvaznik, mschroeder, varunp, shivanshukantprasad, skymoore, brute4s99, wistak, anoopv, dvalencia, rmenezes, julioc, Leptopoda, timothyc, Danial0_0, johnq, Pitel, domson, adeen-s, SemperPeritus, daniel.z.tg, jeanv, seebauer, bugzy, MayeulC, lemuel, menasshock, mikesomov, tctara, apol
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.kde.org/pipermail/kdeconnect/attachments/20190516/fefa39a8/attachment.html>


More information about the KDEConnect mailing list