az-xx 939a5963cd Handle Cronet by re-enabling pinning bypass for local trust anchors ...

Cronet (Chromium's network stack, used by many Google apps, gRPC and
other SDKs) runs TLS in native code and ignores the JVM proxy, OkHttp
and TrustManager layers, so none of the existing unpinning hooks affect
it. It trusts locally-installed CAs by default, but only while
public-key-pinning bypass for local trust anchors is left enabled, which
an app can turn off with a single CronetEngine.Builder call.

Hook enablePublicKeyPinningBypassForLocalTrustAnchors to always pass
true, so our injected CA is accepted while pinning stays intact for
connections chaining to a real (non-local) trust anchor - matching the
"disable only the extra restrictions" approach the other hooks take.

2026-09-18 13:44:25 +02:00

..

android-certificate-unpinning-fallback.js

Add a fallback hook for meta proxygen unpinning

2025-06-24 16:31:15 +02:00

android-certificate-unpinning.js

Handle Cronet by re-enabling pinning bypass for local trust anchors

2026-09-18 13:44:25 +02:00

android-disable-flutter-certificate-pinning.js

Massive Flutter script update so it now works on release versions

2026-07-31 19:43:51 +02:00

android-disable-root-detection.js

Improve accuracy & resilient in root detectin patches

2026-09-09 14:13:49 +02:00

android-proxy-override.js

Apply Android proxy overrides independently to improve resilience

2026-09-09 14:26:19 +02:00

android-system-certificate-injection.js

Improve Android certificate transparency hook approach for Android 17

2026-09-09 13:02:18 +02:00