Merge pull request #412 from tanx/master

Minor fixes to master

.elasticbeanstalk/config.yml

@@ -0,0 +1,12 @@
+branch-defaults:
+  release/prod:
+    environment: mail-prod
+  release/test:
+    environment: mail-test
+global:
+  application_name: mail
+  default_ec2_keyname: null
+  default_platform: Node.js
+  default_region: eu-central-1
+  profile: eb-cli
+  sc: git

.gitignore

@@ -5,8 +5,10 @@ test/lib/
 .sass-cache
 src/css/
 dist/
+compile/
 release/
 test/integration/src/
-src/lib/*.js
-src/js/crypto/aes-gcm.js
-src/js/crypto/util.js
+src/img/icons/all.svg
+test/*/index.js
+**/*.browserified.js
+**/*.js.map

.jshintrc

@@ -1,48 +1,54 @@
 {
-	"indent": 4,
-	"strict": true,
-	"globalstrict": true,
-	"node": true,
-	"browser": true,
-	"nonew": true,
-	"curly": true,
-	"eqeqeq": true,
-	"immed": true,
-	"newcap": true,
-	"regexp": true,
-	"evil": true,
-	"eqnull": true,
-	"expr": true,
-	"trailing": true,
-	"undef": true,
-	"unused": true,
+    "indent": 4,
+    "strict": true,
+    "globalstrict": true,
+    "node": true,
+    "browser": true,
+    "nonew": true,
+    "curly": true,
+    "eqeqeq": true,
+    "immed": true,
+    "newcap": true,
+    "regexp": true,
+    "evil": true,
+    "eqnull": true,
+    "expr": true,
+    "trailing": true,
+    "undef": true,
+    "unused": true,
 
-	"predef": [
-			"console",
-			"importScripts",
-			"process",
-			"QUnit",
-			"test",
-			"asyncTest",
-			"ok",
-			"equal",
-			"deepEqual",
-			"start",
-			"chrome",
-			"requirejs",
-			"define",
-			"self",
-			"describe",
-			"it",
-			"chai",
-			"sinon",
-			"mocha",
-            "before",
-            "beforeEach",
-            "after",
-            "afterEach"
-	],
+    "predef": [
+        "$",
+        "inject",
+        "Promise",
+        "resolves",
+        "rejects",
+        "self",
+        "importScripts",
+        "console",
+        "process",
+        "chrome",
+        "Notification",
+        "Event",
+        "sinon",
+        "mocha",
+        "chai",
+        "expect",
+        "describe",
+        "it",
+        "before",
+        "beforeEach",
+        "after",
+        "afterEach",
+        "FastClick",
+        "angular",
+        "forge",
+        "Lawnchair",
+        "_",
+        "openpgp",
+        "PhoneNumber",
+        "DOMPurify"
+    ],
 
-	"globals": {
-	}
+    "globals": {}
 }

.travis.yml

@@ -1,9 +1,7 @@
+sudo: false
 language: node_js
 node_js:
-  - "0.10"
+  - "0.12"
 before_install:
   - gem install sass
   - npm install -g grunt-cli
-notifications:
-  email:
-    - build@whiteout.io

LICENSE.txt

@@ -1,6 +1,21 @@
-Copyright © 2014, Whiteout Networks GmbH. All rights reserved.
+The MIT License (MIT)
 
-The code is open for inspection and peer review by the security community.
-The code is currently not licensed under an open source license. If you're
-interested in contributing or getting a license, please get in touch with
-us (info@whiteout.io).
+Copyright (c) 2014 Whiteout Networks GmbH.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.

README.md

@@ -1,62 +1,137 @@
-mail-html5 [![Build Status](https://travis-ci.org/whiteout-io/mail-html5.png)](https://travis-ci.org/whiteout-io/mail-html5)
+Whiteout Mail [![Build Status](https://travis-ci.org/whiteout-io/mail.svg?branch=master)](https://travis-ci.org/whiteout-io/mail)
 ==========
 
-Whiteout Mail is an easy to use email client with integrated OpenPGP encryption written in pure JavaScript. Download the official version under [whiteout.io](http://whiteout.io).
+Whiteout Mail is an easy to use email client with integrated OpenPGP encryption written in pure JavaScript. Download the official version under [whiteout.io](https://whiteout.io/#product).
+
+![Screenshot](https://whiteout.io/img/screens.png)
 
 ### Features
 
-You can read about product features and our future roadmap in our [FAQ](https://github.com/whiteout-io/mail-html5/wiki/FAQ).
+You can read about product features and our future roadmap in our [FAQ](https://github.com/whiteout-io/mail/wiki/FAQ).
 
 ### Privacy and Security
 
 We take the privacy of your data very seriously. Here are some of the technical details:
 
-* Messages are [encrypted end-to-end ](http://en.wikipedia.org/wiki/End-to-end_encryption) using the [OpenPGP](http://en.wikipedia.org/wiki/Pretty_Good_Privacy) standard. This means that only you and the recipient can read your mail. Your messages and private PGP key are stored encrypted on your computer and are never sent to our our servers.
+* The code has undergone a [full security audit](https://blog.whiteout.io/2015/06/11/whiteout-mail-1-0-and-security-audit-by-cure53/) by [Cure53](https://cure53.de).
 
-* Like most native email clients whiteout mail uses raw [TCP sockets](http://developer.chrome.com/apps/socket.html) to communicate directly with your mail server via IMAP/SMTP.
+* Messages are [encrypted end-to-end ](http://en.wikipedia.org/wiki/End-to-end_encryption) using the [OpenPGP](http://en.wikipedia.org/wiki/Pretty_Good_Privacy) standard. This means that only you and the recipient can read your mail. Your messages and private PGP key are stored only on your computer (in IndexedDB).
 
-* Mail server [SSL certificates are pinned](http://security.stackexchange.com/questions/29988/what-is-certificate-pinning) under [`src/ca/`](https://github.com/whiteout-io/mail-html5/tree/master/src/ca) in order to protect against SSL certificate forgery and other man in the middle attacks.
+* Users have the option to use [encrypted private key sync](https://github.com/whiteout-io/mail/wiki/Secure-OpenPGP-Key-Pair-Synchronization-via-IMAP) if they want to use Whiteout on multiple devices.
 
-* The app is deployed as a [Chrome Packaged App](https://developer.chrome.com/apps/about_apps.html) with [auditable static versions](https://github.com/whiteout-io/mail-html5/releases) in order to prevent [problems with host-based security](http://tonyarcieri.com/whats-wrong-with-webcrypto).
+* [Content Security Policy (CSP)](http://www.html5rocks.com/en/tutorials/security/content-security-policy/) is enforced to prevent injection attacks.
 
-* [Content Security Policy (CSP)](http://www.html5rocks.com/en/tutorials/security/content-security-policy/) is enforced to prevent against injection attacks.
+* HTML mails are sanitized with [DOMPurify](https://github.com/cure53/DOMPurify) and are rendered in a sandboxed iframe.
+
+* Displaying mail images is optional and opt-in by default.
+
+* Like most native email clients, whiteout mail uses raw [TCP sockets](http://developer.chrome.com/apps/socket.html) to communicate directly with your mail server via IMAP/SMTP. TLS is used to protect your password and message data in transit.
+
+* The app is deployed as a signed [Chrome Packaged App](https://developer.chrome.com/apps/about_apps.html) with [auditable static versions](https://github.com/whiteout-io/mail/releases) in order to prevent [problems with host-based security](https://blog.whiteout.io/2014/04/13/heartbleed-and-javascript-crypto/).
+
+* The app can also be used from any modern web browser in environments where installing an app is not possible (e.g. a locked down corporate desktop). The IMAP/SMTP TLS sessions are still terminated in the user's browser using JS crypto ([Forge](https://github.com/digitalbazaar/forge)), but the encrypted TLS payload is proxied via [socket.io](http://socket.io/), due to the lack of raw sockets in the browser. **Please keep in mind that this mode of operation is not as secure as using the signed packaged app, since users must trust the webserver to deliver the correct code. This mode will still protect user against passive attacks like wiretapping (since PGP and TLS are still applied in the user's browser), but not against active attacks from the webserver. So it's best to decide which threat model applies to you.**
+
+### Architecture
+
+![client architecture](https://whiteout.io/img/app_layers.png)
 
 ### Reporting bugs and feature requests
 
-* We will launch a bug bounty program later on for independant security researchers. If you find any security vulnerabilities, don't hesitate to contact us [security@whiteout.io](mailto:security@whiteout.io).
+* We will launch a bug bounty program later on for independent security researchers. If you find any security vulnerabilities, don't hesitate to contact us [security@whiteout.io](mailto:security@whiteout.io).
 
-* You can also just create an [issue](https://github.com/whiteout-io/mail-html5/issues) on GitHub if you're missing a feature or just want to give us feedback. It would be much appreciated!
+* You can also just create an [issue](https://github.com/whiteout-io/mail/issues) on GitHub if you're missing a feature or just want to give us feedback. It would be much appreciated!
 
 ### Testing
 
-You can download a prebuilt bundle under [releases](https://github.com/whiteout-io/mail-html5/releases) or build your own from source (requires [node.js](http://nodejs.org/download/), [grunt](http://gruntjs.com/getting-started#installing-the-cli) and [sass](http://sass-lang.com/install)):
+You can download a prebuilt bundle under [releases](https://github.com/whiteout-io/mail/releases) or build your own from source (requires [node.js](http://nodejs.org/download/), [grunt](http://gruntjs.com/getting-started#installing-the-cli) and [sass](http://sass-lang.com/install)):
 
     npm install && npm test
 
-This will download all dependencies, run the tests and build the Chrome Packaged App bundle **DEV.zip** which can be installed under [chrome://extensions](chrome://extensions) in developer mode.
+This will download all dependencies, run the tests and build the Chrome Packaged App bundle **release/whiteout-mail_DEV.zip** which can be installed under [chrome://extensions](chrome://extensions) in developer mode.
 
 ### Development
 For development you can start a connect dev server:
 
     grunt dev
 
-Then visit [http://localhost:8580/dist/chrome.html#/desktop](http://localhost:8580/dist/chrome.html#/desktop) for front-end code or [http://localhost:8580/test/unit/](http://localhost:8580/test/unit/) to test JavaScript changes. You can also start a watch task so you don't have rebuild everytime you make a change:
+Then visit [http://localhost:8580/dist/#/account?dev=true](http://localhost:8580/dist/#/account?dev=true) for front-end code or [http://localhost:8580/test/unit/](http://localhost:8580/test/unit/) to test JavaScript changes. You can also start a watch task so you don't have rebuild everytime you make a change:
 
     grunt watch
 
-## Releasing
+## Releasing Chrome App
 
     grunt release-test --release=0.0.0.x
     grunt release-stable --release=0.x.0
 
+## Deploying Web App & Selfhosting
+
+The App can be used either as a Chrome Packaged App or just by hosting it on your own trusted web server. You can build the app from source.
+
+### Build from source
+
+Clone the git repository
+
+    git clone https://github.com/whiteout-io/mail.git
+
+Build and generate the `dist/` directory:
+
+    npm install && grunt
+
+### Running the server
+
+To test the server, start it in development mode (without SSL):
+
+    node server.js --dev
+
+Navigate to [http://localhost:8889](http://localhost:8889) (or whatever port is set using the `PORT` environment variable).
+
+To start the server for production use (this automatically redirects to `https`)
+
+    npm start
+
+**A note on security: The app should not be used without SSL so it's best to set up a reverse proxy or Loadbalancer with your SSL certificates. If you are not sure how to do this it might be easier to use our managed web hosting or packaged apps under [https://whiteout.io/#product](https://whiteout.io/#product).**
+
+You can limit incoming and outgoing connections to the socket.io proxy by setting the following environment variables:
+
+    # the web socket proxy listens to this port
+    # if unset, defaults to 8889
+    PORT=12345
+
+    # the socket.io proxy accepts connections from these origins to tunnel them to tcp,
+    # separate with commas
+    # if unset, defaults to 'localhost:' + port
+    INBOUND_ORIGINS='foo:1234,bar:569'
+
+    # the socket.io proxy opens tcp connections with these ports to tunnel them to socket.io
+    # separate with commas
+    # if unset, defaults to '143,465,587,993' (25 is forbidden by default)
+    OUTBOUND_PORTS='123,456,789'
+
+To start the server in development mode (no forced HTTPS, iframe loads http content), run `node server.js --dev`
+
 ## License
 
-    Copyright © 2014, Whiteout Networks GmbH. All rights reserved.
+    The MIT License (MIT)
 
-    The code is open for inspection and peer review by the security community.
-    The code is currently not licensed under an open source license. If you're
-    interested in contributing or getting a license, please get in touch with
-    us (info@whiteout.io).
+    Copyright (c) 2014 Whiteout Networks GmbH.
+
+    Permission is hereby granted, free of charge, to any person obtaining a copy
+    of this software and associated documentation files (the "Software"), to deal
+    in the Software without restriction, including without limitation the rights
+    to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+    copies of the Software, and to permit persons to whom the Software is
+    furnished to do so, subject to the following conditions:
+
+    The above copyright notice and this permission notice shall be included in
+    all copies or substantial portions of the Software.
+
+    THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+    IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+    FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+    AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+    LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+    OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+    THE SOFTWARE.
 
 ### Third party libraries
 

config/default.js

@@ -0,0 +1,19 @@
+'use strict';
+
+var port = process.env.PORT || 8889;
+
+module.exports = {
+    server: {
+        port: port,
+        inboundOrigins: (process.env.INBOUND_ORIGINS || ('localhost:' + port)).split(',').map(function(host) {
+            return host.trim();
+        }),
+        outboundPorts: (process.env.OUTBOUND_PORTS || '143,465,587,993').split(',').map(function(i) {
+            return parseInt(i, 10);
+        })
+    },
+    log: {
+        level: "silly",
+        http: ':remote-addr [:date] ":method :url HTTP/:http-version" :status :res[content-length] ":referrer"'
+    }
+};

config/integration.js

@@ -0,0 +1,10 @@
+'use strict';
+
+module.exports = {
+    server: {
+        port: 8889
+    },
+    log: {
+        level: "error"
+    }
+};

config/production.js

@@ -0,0 +1,7 @@
+'use strict';
+
+module.exports = {
+    log: {
+        level: "error"
+    }
+};

package.json

@@ -1,41 +1,68 @@
 {
-    "name": "mail-html5",
-    "version": "0.0.0",
-    "engines": {
-        "node": ">=0.8"
-    },
-    "scripts": {
-        "postinstall": "grunt dist-npm",
-        "test": "grunt && grunt test",
-        "start": "grunt && grunt dev"
-    },
-    "dependencies": {
-        "crypto-lib": "https://github.com/whiteout-io/crypto-lib/tarball/v0.2.0",
-        "imap-client": "https://github.com/whiteout-io/imap-client/tarball/v0.3.4",
-        "mailreader": "https://github.com/whiteout-io/mailreader/tarball/v0.3.4",
-        "pgpmailer": "https://github.com/whiteout-io/pgpmailer/tarball/v0.3.6",
-        "pgpbuilder": "https://github.com/whiteout-io/pgpbuilder/tarball/v0.3.5",
-        "requirejs": "2.1.14",
-        "axe": "https://github.com/whiteout-io/axe/tarball/v0.0.2"
-    },
-    "devDependencies": {
-        "angularjs": "https://github.com/angular/angular.js/tarball/v1.2.8",
-        "browsercrow": "https://github.com/whiteout-io/browsercrow/tarball/master",
-        "browsersmtp": "https://github.com/whiteout-io/browsersmtp/tarball/master",
-        "grunt": "~0.4.1",
-        "mocha": "~1.13.0",
-        "chai": "~1.7.2",
-        "sinon": "~1.7.3",
-        "grunt-contrib-connect": "~0.5.0",
-        "grunt-contrib-jshint": "~0.6.4",
-        "grunt-mocha": "~0.4.1",
-        "grunt-contrib-clean": "~0.5.0",
-        "grunt-csso": "~0.6.1",
-        "grunt-contrib-sass": "~0.7.3",
-        "grunt-autoprefixer": "~0.7.2",
-        "grunt-contrib-watch": "~0.5.3",
-        "grunt-contrib-copy": "~0.4.1",
-        "grunt-contrib-compress": "~0.5.2",
-        "grunt-node-webkit-builder": "~0.1.17"
-    }
+  "name": "whiteout-mail",
+  "description": "Mail App with integrated OpenPGP encryption.",
+  "author": "Whiteout Networks",
+  "homepage": "https://whiteout.io",
+  "engines": {
+    "node": ">=0.10"
+  },
+  "scripts": {
+    "test": "grunt && grunt test",
+    "start": "node server.js"
+  },
+  "dependencies": {
+    "compression": "^1.0.11",
+    "config": "^1.0.2",
+    "express": "^4.8.3",
+    "morgan": "^1.2.3",
+    "npmlog": "^0.1.1",
+    "socket.io": "^1.0.6"
+  },
+  "devDependencies": {
+    "assemble": "~0.4.42",
+    "axe-logger": "~0.0.2",
+    "browsercrow": "https://github.com/whiteout-io/browsercrow/tarball/master",
+    "browsersmtp": "https://github.com/whiteout-io/browsersmtp/tarball/master",
+    "chai": "~1.9.2",
+    "crypto-lib": "~0.2.1",
+    "dompurify": "~0.7.3",
+    "grunt": "~0.4.1",
+    "grunt-angular-templates": "~0.5.7",
+    "grunt-autoprefixer": "~0.7.2",
+    "grunt-browserify": "3.7.0",
+    "insert-module-globals": "6.5.0",
+    "grunt-contrib-clean": "~0.5.0",
+    "grunt-contrib-compress": "~0.5.2",
+    "grunt-contrib-concat": "^0.5.0",
+    "grunt-contrib-connect": "~0.5.0",
+    "grunt-contrib-copy": "~0.4.1",
+    "grunt-contrib-jshint": "~0.6.4",
+    "grunt-contrib-sass": "~0.7.3",
+    "grunt-contrib-uglify": "^0.6.0",
+    "grunt-contrib-watch": "~0.5.3",
+    "grunt-csso": "~0.6.1",
+    "grunt-exorcise": "^0.2.0",
+    "grunt-manifest": "^0.4.0",
+    "grunt-mocha-phantomjs": "^0.7.0",
+    "grunt-shell": "~1.1.1",
+    "grunt-string-replace": "~1.0.0",
+    "grunt-svgmin": "~1.0.0",
+    "grunt-svgstore": "~0.3.4",
+    "handlebars-helper-compose": "~0.2.12",
+    "iframe-resizer": "^2.8.3",
+    "imap-client": "~0.14.2",
+    "jquery": "~2.1.1",
+    "mailbuild": "^0.3.7",
+    "mailreader": "~0.4.0",
+    "mocha": "^1.21.4",
+    "ng-infinite-scroll": "~1.1.2",
+    "openpgp": "^1.0.0",
+    "pgpbuilder": "~0.6.0",
+    "pgpmailer": "~0.9.1",
+    "sinon": "~1.7.3",
+    "sw-precache": "^1.3.0",
+    "tcp-socket": "~0.5.0",
+    "time-grunt": "^1.0.0",
+    "wo-smtpclient": "~0.6.0"
+  }
 }

res/Glyphicons License.txt

@@ -1,21 +0,0 @@
-THANK YOU FOR USING GLYPHICONS!
-
-If you would like to be among the first ones to hear about all the news, follow @glyphicons on Twitter.
-
-LICENSE:
-------------------- 
-GLYPHICONS FREE are released under the Creative Commons Attribution 3.0 Unported (CC BY 3.0). The Glyphicons FREE can be used both commercially and for personal use, but you must always add a link to www.glyphicons.com in a prominent place (e.g. the footer of a website), include the CC-BY license and the reference to www.glyphicons.com on every page using Glyphicons.
-
-Glyphicons Halflings are also a part of Bootstrap by Twitter, and are released under the same Apache 2.0 license as Bootstrap. While you are not required to include attribution on your Bootstrap-based projects, I'd certainly appreciate a visibile link back to glyphicons.com in any place you find appropriate (footer, docs, etc).
-
-All logos and trademarks in social icons are the property of the respective trademark owners.®
-
-CONTACT:
--------------------
-Web: http://glyphicons.com/
-Email: glyphicons@gmail.com
-Twitter: http://twitter.com/glyphicons
-
-If you want to use the icons without restrictions, please buy any version on www.glyphicons.com, thank you.
-
-Jan Kovařík

res/android-release-keys.properties

@@ -0,0 +1,2 @@
+storeFile=/Users/tanx/.keystore
+keyAlias=mykey

res/aws_release.sh

@@ -0,0 +1,45 @@
+#!/bin/sh
+
+# go to root
+cd `dirname $0`
+cd ..
+
+if [ "$#" -ne 3 ] || [ "$1" != "prod" ] && [ "$1" != "test" ] ; then
+    echo 'Usage: ./res/aws_release prod|test from-branch 1.0.0'
+    exit 0
+fi
+
+# switch branch
+git checkout $2
+git branch -D release/$1
+git checkout -b release/$1
+git merge $2 --no-edit
+
+# abort if tests fail
+set -e
+
+# build and test
+rm -rf node_modules/
+npm cache clear
+npm install
+npm test
+grunt release-$1 --release=$3
+
+# install only production dependencies
+rm -rf node_modules/
+npm install --production
+
+# delete .gitignore files before adding to git for aws deployment
+find node_modules/ -name ".gitignore" -exec rm -rf {} \;
+
+# Add runtime dependencies to git
+sed -i "" '/dist/d' .gitignore
+sed -i "" '/node_modules/d' .gitignore
+git add .gitignore node_modules/ dist/
+git commit -m "Update release"
+
+# push to aws
+eb deploy
+
+# switch back to $2 branch
+git checkout $2

res/build_cca.sh

@@ -1,11 +0,0 @@
-#!/bin/sh
-
-# go to root
-cd `dirname $0`
-cd ..
-
-DIR=release/cca
-
-rm -rf $DIR
-mkdir -p $DIR
-cca create $DIR/Whiteout --link-to=dist/manifest.json

res/cca_build.sh

@@ -0,0 +1,73 @@
+#!/bin/sh
+
+# reads values from JSON
+jsonValue() {
+  KEY=$1
+  num=$2
+  awk -F"[,:}]" '{for(i=1;i<=NF;i++){if($i~/'$KEY'\042/){print $(i+1)}}}' | tr -d '"' | sed -n ${num}p
+}
+
+# go to root
+cd `dirname $0`
+cd ..
+
+DIR=release/cca
+PROJNAME=`less dist/manifest.json | jsonValue name 1 | sed -e 's/^ *//' -e 's/ *$//'`
+
+# create
+rm -rf $DIR
+mkdir -p $DIR
+cca create $DIR/Whiteout --link-to=dist/manifest.json
+
+#prepare
+cd $DIR/Whiteout
+cca prepare
+
+# 
+# post-build tweaks
+# 
+
+echo ""
+echo "## Running post-build tweaks"
+
+# cp signing config
+echo "Copy Android signing config"
+cp ../../../res/android-release-keys.properties .
+
+# status bar should not overlay the web view
+echo "Tweaking iOS status bar to not overlay the web view"
+sed -i "" 's/StatusBarOverlaysWebView" value="true"/StatusBarOverlaysWebView" value="false"/' "platforms/ios/$PROJNAME/config.xml"
+
+# status bar should use dark font on light background
+echo "Tweaking iOS status bar to use dark font on light background"
+sed -i "" 's/StatusBarStyle" value="lightcontent"/StatusBarStyle" value="darkcontent"/' "platforms/ios/$PROJNAME/config.xml"
+
+# copy splash screens
+echo "Copying splash screens"
+cp ../../../src/img/Default* "platforms/ios/$PROJNAME/Resources/splash"
+
+# fixing missing/wrong icons
+echo "Fixing wrong/missing iOS icons"
+cp ../../../src/img/icon-40-ios.png "platforms/ios/$PROJNAME/Resources/icons/icon-40.png"
+cp ../../../src/img/icon-80-ios.png "platforms/ios/$PROJNAME/Resources/icons/icon-40@2x.png"
+cp ../../../src/img/icon-120-ios.png "platforms/ios/$PROJNAME/Resources/icons/icon-40@3x.png"
+cp ../../../src/img/icon-50-ios.png "platforms/ios/$PROJNAME/Resources/icons/icon-50.png"
+cp ../../../src/img/icon-100-ios.png "platforms/ios/$PROJNAME/Resources/icons/icon-50@2x.png"
+cp ../../../src/img/icon-60-ios.png "platforms/ios/$PROJNAME/Resources/icons/icon-60.png"
+cp ../../../src/img/icon-120-ios.png "platforms/ios/$PROJNAME/Resources/icons/icon-60@2x.png"
+cp ../../../src/img/icon-180-ios.png "platforms/ios/$PROJNAME/Resources/icons/icon-60@3x.png"
+cp ../../../src/img/icon-72-ios.png "platforms/ios/$PROJNAME/Resources/icons/icon-72.png"
+cp ../../../src/img/icon-144-ios.png "platforms/ios/$PROJNAME/Resources/icons/icon-72@2x.png"
+cp ../../../src/img/icon-76-ios.png "platforms/ios/$PROJNAME/Resources/icons/icon-76.png"
+cp ../../../src/img/icon-152-ios.png "platforms/ios/$PROJNAME/Resources/icons/icon-76@2x.png"
+cp ../../../src/img/icon-29-ios.png "platforms/ios/$PROJNAME/Resources/icons/icon-small.png"
+cp ../../../src/img/icon-58-ios.png "platforms/ios/$PROJNAME/Resources/icons/icon-small@2x.png"
+cp ../../../src/img/icon-87-ios.png "platforms/ios/$PROJNAME/Resources/icons/icon-small@3x.png"
+cp ../../../src/img/icon-57-ios.png "platforms/ios/$PROJNAME/Resources/icons/icon.png"
+cp ../../../src/img/icon-114-ios.png "platforms/ios/$PROJNAME/Resources/icons/icon@2x.png"
+
+# print reminder for manual work in xcode
+echo ""
+echo "### Reminder for manual steps required for iOS release"
+echo "### Change deployment target to iOS 8.1"
+echo "### Add retina icons to build, migrate to icon set, fix splash screens config"

res/cca_release_android.sh

@@ -0,0 +1,11 @@
+#!/bin/sh
+
+# go to root
+cd `dirname $0`
+cd ..
+
+DIR=release/cca
+
+#prepare
+cd $DIR/Whiteout
+cca build android --release

res/cca_run_android.sh

@@ -5,5 +5,4 @@ cd `dirname $0`
 cd ..
 
 cd release/cca/Whiteout
-#cca run ios
 cca run android --device

res/cca_run_ios.sh

@@ -5,5 +5,4 @@ cd `dirname $0`
 cd ..
 
 cd release/cca/Whiteout
-
-./platforms/android/cordova/build --release
+cca run ios