General information

• App version: v0.8.0
• App source: Google Play
• Android Version: 9.0

Expected result

The activity org.shadowice.flocke.andotp.Activities.PanicResponderActivity should be protected.
andOTP should restrict which applications can launch the Activity.

What does happen instead?
There are two attack scenarios:

1. Any application can sta

Given the nature of the project we should provide to users all the tools to verify that the content being served to the browser is the one present on this repository, allowing users to detect when instances modify the assets that are being served.

One feature that might be helpful for this purpose is [Subresource Integrity](https://developer.mozilla.org/en-US/docs/Web/Security/Subresource_Integ

A production environment is triggering the exception "Error Message: TypeError: Cannot read property 'insertBefore' of null".

This seems to happen on the admin interface on the url: "/#/admin/questionnaires" in relation to $scope.triggerFieldDialog

The setup is using version 3.0.2

mkdir tmp
neopg cat tmp
terminate called after throwing an instance of 'Botan::Stream_IO_Error'
  what():  I/O error: DataSource_Stream::read: Source failure
Aborted (core dumped)