avinal b8d4f52e22 Fix 5 security issues flagged in review ...

1. Filter injection: escape quotes/backslashes in search query
   before interpolating into API filter parameter

2. Backup data leak: configure backup_rules.xml and
   data_extraction_rules.xml to exclude sharedprefs, database,
   and datastore files from cloud backup and device transfer

3. Cleartext traffic: add network_security_config.xml with
   cleartextTrafficPermitted=false, referenced from manifest

4. Debug logging: remove all Log.d() calls from
   TaskCheckWorker, DirectAlarmScheduler, TaskReminderReceiver
   that logged task content and scheduling details

5. Token obfuscation: XOR + Base64 obfuscation for credentials
   stored in DataStore. Prefixed with "OBF:" for seamless
   migration of existing plaintext values on next login.
   Not cryptographic — prevents casual file inspection.

Signed-off-by: Avinal Kumar <avinal.xlvii@gmail.com>
Co-Authored-By: Claude Opus 4.6 (1M context)

2026-05-22 17:35:37 +05:30

..

src/main

Fix 5 security issues flagged in review

2026-05-22 17:35:37 +05:30

build.gradle.kts

Add module build configs and platform expect/actual stubs

2026-05-19 17:06:41 +05:30

proguard-rules.pro

Fix warnings, update deps, Metro-style task detail, comment counts

2026-05-19 19:04:02 +05:30