Function InitializeSecurityConfig

test-app/runtime/src/main/cpp/DevFlags.cpp:53–106

}

void InitializeSecurityConfig() {
  std::call_once(s_securityConfigInitFlag, []() {
    try {
      JEnv env;
      jclass runtimeClass = env.FindClass("com/tns/Runtime");
      if (runtimeClass == nullptr) {
        return;
      }
      
      // Check isDebuggable first
      jmethodID isDebuggableMid = env.GetStaticMethodID(runtimeClass, "isDebuggable", "()Z");
      if (isDebuggableMid != nullptr) {
        jboolean res = env.CallStaticBooleanMethod(runtimeClass, isDebuggableMid);
        s_isDebuggable = (res == JNI_TRUE);
      }
      
      // If debuggable, we don't need to check further - always allow
      if (s_isDebuggable) {
        s_allowRemoteModules = true;
        return;
      }
      
      // Check isRemoteModulesAllowed
      jmethodID allowRemoteMid = env.GetStaticMethodID(runtimeClass, "isRemoteModulesAllowed", "()Z");
      if (allowRemoteMid != nullptr) {
        jboolean res = env.CallStaticBooleanMethod(runtimeClass, allowRemoteMid);
        s_allowRemoteModules = (res == JNI_TRUE);
      }
      
      // Get the allowlist
      jmethodID getAllowlistMid = env.GetStaticMethodID(runtimeClass, "getRemoteModuleAllowlist", "()[Ljava/lang/String;");
      if (getAllowlistMid != nullptr) {
        jobjectArray allowlistArray = (jobjectArray)env.CallStaticObjectMethod(runtimeClass, getAllowlistMid);
        if (allowlistArray != nullptr) {
          jsize len = env.GetArrayLength(allowlistArray);
          for (jsize i = 0; i < len; i++) {
            jstring jstr = (jstring)env.GetObjectArrayElement(allowlistArray, i);
            if (jstr != nullptr) {
              const char* str = env.GetStringUTFChars(jstr, nullptr);
              if (str != nullptr) {
                s_remoteModuleAllowlist.push_back(std::string(str));
                env.ReleaseStringUTFChars(jstr, str);
              }
              env.DeleteLocalRef(jstr);
            }
          }
          env.DeleteLocalRef(allowlistArray);
        }
      }
    } catch (...) {
      // Keep defaults (remote modules disabled)
    }
  });
}

bool IsRemoteModulesAllowed() {
  InitializeSecurityConfig();