Trần BáchandGitHub 67d3746f69 fix(security): theme selection via dom input without validation (#629)
The `changeCSS` function constructs a URL by interpolating user-controlled input (`theme` parameter from the `<select>` element) directly into a CDN URL template. While the current `<select>` restricts values, if the function were called programmatically (e.g., via browser console or if the DOM is manipulated), an attacker could inject an arbitrary path into the stylesheet URL, potentially loading a malicious CSS file from the CDN.

Affected files: index.html

Signed-off-by: Trần Bách <45133811+barttran2k@users.noreply.github.com>
2026-04-07 18:11:14 +00:00
2026-03-23 16:10:50 +00:00
2017-03-20 16:06:17 +01:00

Android FOSS

CI License

A list of Free and Open Source Software (FOSS) for Android saving Freedom and Privacy.

Caution

🚨 Free and Open-Source Android is under threat. Google will turn Android into a locked-down platform, restricting your essential freedom to install apps of your choice. Make your voice heard Keep Android Open.

See also: Open Android Projects

Table of Contents


App Store


Apps

• Ad Blocker

• Anime & Manga

• Automation

• Barcode & QR Code Scanner

• Battery

• Browser

• Calculator

• Calendar

• Call Blocker & Spam Filter

• Camera

• Clock & Time

• Community Clients

• Contacts

• Development

• Diary

• Dialer

• Dictionaries

• Document & PDF Viewer

• Document Scanner

• Downloader & Manager

• Email Aliases

• Email Clients

• File Encryption

• File Manager

• File Sharing

• Finance

• Firewall

• Flashcard

• Flashlight

• Graphics

• Habit Tracker

• Icon Packs

• Image Manipulation

• Keyboard

• Launcher & Desktop

• Maps & Navigation

• Media Frontends

• Messaging

• Miscellaneous

• Movie & Cinema

• Music

• Music & Audio Player

• Notes

• Office

• Password & Authentication

• Podcast & Audio Book Player

• Privacy & Security

• Public Transport

• Religion

• RSS Readers

• Sandboxing

• Science & Education

• SMS

• Sports & Health

• Synchronisation

• System

• Terminals

• Text Editors

• Text-to-Speech

• ToDo Lists

• Translation

• URL Manipulation

• Utilities

• Video Player

• VPN

• Wallpapers

• Weather


Games

• Board

• Card

• Educational

• Emulator

• Miscellaneous

• Music

• Puzzle

• Racing

• Retro

• Strategy

• Word


Rooting and Recovery


Tools


Tutorials and Guides


Getting more …

Languages
Python 43.6%
Shell 29.7%
HTML 26.7%