Codename One Adds Cross-Platform Health API With Privacy-Aware Design

·2 views

Codename One, an open-source framework for building native apps from a single Java or Kotlin codebase, has merged a cross-platform health API via PR #5475 into its core. The API covers HealthKit, Health Connect, recorded workouts, nutrition, Bluetooth health sensors, and deterministic simulation across four dedicated packages. A key design decision reflects iOS HealthKit's privacy model: when a user denies read access, the API returns no data rather than an error, making it indistinguishable from an empty store. Developers are guided to display 'no data available' instead of assuming denial, avoiding accidental disclosure of a user's privacy choices. All results and sensor events are delivered on the Codename One Event Dispatch Thread, ensuring consistent behavior across phones, simulators, and desktop environments.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Developer finds 8 WCAG errors in own accessibility plugin after reviewer flags 3

A WordPress accessibility scanner developer discovered eight incorrectly mapped WCAG criteria in their plugin after a reviewer flagged three issues last week. Problems included citing WCAG 4.1.1, a criterion removed in WCAG 2.2, and mislabeling best practices as formal conformance violations. Of the plugin's 25 automated checks, only 18 actually correspond to WCAG 2.2 success criteria, while the remaining seven are best practices. The developer corrected all eight rules, updated marketing copy to reflect the accurate 18-and-7 split, and tightened the accessibility statement generator to prevent false conformance claims. The incident highlighted how overstated audit reports can undermine legal accessibility declarations rather than support them.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Metabase patches CVSS 10.0 SQL injection zero-day exploited before disclosure

Metabase has disclosed a critical unauthenticated SQL injection vulnerability in its business intelligence platform, rated CVSS 10.0, that was actively exploited in the wild before the patch was released. The flaw allows remote attackers without any credentials to inject SQL into the Metabase application database and grant themselves administrator access. Because Metabase holds stored credentials to connected data warehouses and production databases, a successful compromise effectively exposes all linked data sources. Six version branches from 1.58 onwards are affected, and self-hosted users must manually apply the exact fixed build for their branch, as Metabase Cloud instances have already been updated by the vendor. As a temporary workaround, administrators who cannot patch immediately are advised to block the /api/session/reset_password endpoint at their reverse proxy or WAF.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

IT Student from Indonesia Joins DEV Community to Share Web Dev Journey

Delrico, an Information Technology student at the University of North Sumatra (USU) in Indonesia, has introduced himself to the DEV Community platform. He has a keen interest in web development and enjoys learning through hands-on experimentation and building projects. He joined the community to learn from other developers and share his own discoveries along the way. He plans to write about lessons learned, projects built, and problems solved that may benefit other developers. He views sharing his journey publicly as an integral part of his own learning process.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Developer Builds Sentinel, a Manifest V3 Browser Extension for Phishing Detection

Yerevan-based full-stack developer Artyom Mamyan has released Sentinel, an open-source browser extension built on Chrome's Manifest V3 platform. The tool combines multiple detection layers, including URL heuristics, typosquat-style checks, optional Google Safe Browsing lookups, and brand or page content signals. When a threat is identified, users are alerted through a popup dashboard, an in-page banner, or a full block interstitial. Sentinel is written in vanilla JavaScript with configurable sensitivity settings and includes architecture documentation in its GitHub repository. Mamyan describes it as a portfolio-grade security UX project and is open to remote work opportunities.

0 comments Read more at DEV Community