Download Latest Version Release 3.3.25 source code.zip (33.3 MB)
Email in envelope

Get an email when there's a new version of PlainApp

Home / v3.3.22
Name Modified Size InfoDownloads / Week
Parent folder
mapping-google-release.txt 2026-09-09 207.9 MB
0
mapping-github-release.txt 2026-09-09 208.0 MB
0
multiple.intoto.jsonl 2026-09-09 22.1 kB
0
PlainApp-3.3.22-Google-Play.aab 2026-09-09 47.2 MB
0
PlainApp-3.3.22-Old-32bit.apk 2026-09-09 53.0 MB
0
PlainApp-3.3.22-64bit-Recommended.apk 2026-09-09 61.7 MB
0
README.md 2026-09-09 2.3 kB
0
Release 3.3.22 source code.tar.gz 2026-09-09 31.0 MB
0
Release 3.3.22 source code.zip 2026-09-09 34.0 MB
0
Totals: 9 Items   642.7 MB 0

What's Changed

Service & Permissions

  • First-run permission wizard for starting the service: step-by-step guidance for notification and storage permissions, with clearer wording and no silent auto-start when required permissions are missing

Feeds

  • New first-run discovery mode: browse the built-in feed catalog right on the Feeds page and subscribe with a per-feed button — no page switching, then tap "Start reading" when ready. Deleting your last feed returns to discovery mode
  • Fixed the top bar getting stuck (unable to expand) after swiping to another article in the pager
  • "Load full content" button now only appears for feeds that serve summaries

Web Client

  • Fixed chunked upload file ID collisions that could corrupt uploaded files; the app now also verifies total chunk size before merging

Security

  • File responses now include Content-Security-Policy: sandbox and X-Content-Type-Options: nosniff, blocking stored XSS via SVG/HTML files in /fs and guest shares
  • Removed trust in client-supplied Forwarded headers: the /shutdown loopback guard, login rate limiting, and the DLNA allowlist now key on the real socket IP and cannot be spoofed

Security

VirusTotal Scan

File Status Scan Report
PlainApp-3.3.22-64bit-Recommended.apk ✅ 0/0 Clean View Report
PlainApp-3.3.22-Old-32bit.apk ✅ 0/66 Clean View Report
PlainApp-3.3.22-Google-Play.aab ✅ 0/61 Clean View Report

SLSA Provenance (Level 3)

The .intoto.jsonl file is a signed SLSA provenance document covering all release artifacts (APKs + AAB). Verify with slsa-verifier:

:::sh
slsa-verifier verify-artifact PlainApp-3.3.22-64bit-Recommended.apk \
  --provenance-path multiple.intoto.jsonl \
  --source-uri github.com/plainhub/plain-app
Source: README.md, updated 2026-09-09