From 0e8a87f2ad2bd40d34996374aebb6dff070e4b5f Mon Sep 17 00:00:00 2001
From: Lena <lena@omega>
Date: Sun, 16 Aug 2026 00:00:00 +0000
Subject: app: harden backup execution

Validate persisted state and destination boundaries, make interruption
and mirror deletion explicit, and keep scheduled work singular.
---
 app/src/main/AndroidManifest.xml | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

(limited to 'app/src/main/AndroidManifest.xml')

diff --git a/app/src/main/AndroidManifest.xml b/app/src/main/AndroidManifest.xml
index 2062a2a..4aeeb9b 100644
--- a/app/src/main/AndroidManifest.xml
+++ b/app/src/main/AndroidManifest.xml
@@ -10,14 +10,19 @@
     <uses-permission android:name="android.permission.FOREGROUND_SERVICE_DATA_SYNC" />
     <uses-permission android:name="android.permission.WAKE_LOCK" />
     <uses-permission android:name="android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS" />
+    <!-- WorkManager reschedules persisted periodic work after a reboot. -->
+    <uses-permission android:name="android.permission.RECEIVE_BOOT_COMPLETED" />
 
     <application
         android:name=".App"
         android:allowBackup="false"
+        android:dataExtractionRules="@xml/backup_rules"
+        android:fullBackupContent="@xml/backup_rules_legacy"
         android:icon="@mipmap/ic_launcher"
         android:label="@string/app_name"
         android:supportsRtl="true"
-        android:theme="@style/Theme.Rsend">
+        android:theme="@style/Theme.Rsend"
+        android:usesCleartextTraffic="false">
 
         <activity
             android:name=".MainActivity"
@@ -51,6 +56,7 @@
         <!-- WorkManager runs the sync as a dataSync foreground service. -->
         <service
             android:name="androidx.work.impl.foreground.SystemForegroundService"
+            android:exported="false"
             android:foregroundServiceType="dataSync"
             tools:node="merge" />
     </application>
-- 
cgit v1.2.3