风流搞技术
风流搞技术
  • 发布:2017-03-22 10:05
  • 更新:2017-03-22 15:13
  • 阅读:1482

ios如何禁用JSPatch

分类:HBuilder
iOS

上架被拒,如何让打出来的包里没有JSPatch组件

2017-03-22 10:05 负责人:无 分享
已邀请:
shimeifang

shimeifang

违反2.5.2,3.3.2 Your app, extension, and/or linked

发件人 Apple
Dear Developer,

Your app, extension, and/or linked framework appears to contain code designed explicitly with the capability to change your app’s behavior or functionality after App Review approval, which is not in compliance with section 3.3.2 of the Apple Developer Program License Agreement and App Store Review Guideline 2.5.2. This code, combined with a remote resource, can facilitate significant changes to your app’s behavior compared to when it was initially reviewed for the App Store. While you may not be using this functionality currently, it has the potential to load private frameworks, private methods, and enable future feature changes.

This includes any code which passes arbitrary parameters to dynamic methods such as dlopen(), dlsym(), respondsToSelector:, performSelector:, method_exchangeImplementations(), and running remote scripts in order to change app behavior or call SPI, based on the contents of the downloaded script. Even if the remote resource is not intentionally malicious, it could easily be hijacked via a Man In The Middle (MiTM) attack, which can pose a serious security vulnerability to users of your app.

Please perform an in-depth review of your app and remove any code, frameworks, or SDKs that fall in line with the functionality described above before submitting the next update for your app for review.

Best regards,

App Store Review
发件人苹果
尊敬的开发者,

您的应用,扩展程序和/或链接框架似乎包含明确设计的代码,能够在应用审核批准后更改应用的行为或功能,这不符合Apple开发人员计划许可协议和应用的第3.3.2节商店审查指南2.5.2。此代码与远程资源相结合,可以帮助对应用程序的行为进行重大更改(与最初对App Store进行审核时相比)。虽然当前可能不使用此功能,但它可能会加载私有框架,私有方法,并支持未来的功能更改。

这包括将任意参数传递给动态方法(如dlopen(),dlsym(),respondingToSelector :, performSelector :, method_exchangeImplementations())和运行远程脚本以便更改应用程序行为或调用SPI的任何代码,下载的脚本。即使远程资源不是故意恶意的,它也可能很容易被劫持通过中间人(MiTM)攻击,这可能对您的应用程序的用户造成严重的安全漏洞。

请对您的应用执行深入审核,并删除与上述功能相符的任何代码,框架或SDK,然后再提交下一个更新以供审核。

最好的祝福,

App Store评论

各位大牛怎么破

请问解决了吗?

  • 风流搞技术 (作者)

    我的被拒也是一样的回复,是hbulider打包的问题,sdk里包含了JSPatch,要问他们怎么去掉


    2017-03-22 11:54

风流搞技术

风流搞技术 (作者)

我的被拒也是一样的回复,是hbulider打包的问题,sdk里包含了JSPatch,要问他们怎么去掉

shimeifang

shimeifang

http://ask.dcloud.net.cn/article/1218 参考这个文档,去掉高德和个推吧;正在重新打包上传呢

  • 风流搞技术 (作者)

    高德和个推已经去掉了还是被拒,是JSPatch的问题吧


    2017-03-22 14:28

风流搞技术

风流搞技术 (作者)

高德和个推已经去掉了还是被拒,是JSPatch的问题吧

shimeifang

shimeifang

相关的系统库文件全删掉了吗?苹果给你返回什么错误

  • 风流搞技术 (作者)

    你都删了什么文件啊


    2017-03-22 16:20

  • 风流搞技术 (作者)

    你的删完上架通过了?


    2017-03-22 16:20

  • shimeifang

    恩 通过了啊 就是把个推和高德地图的SDK删掉就可以了啊


    2017-03-27 15:34

  • shimeifang

    回复 风流搞技术:我的都已经审核通过了 现在已经发布了


    2017-03-27 15:35

shimeifang

shimeifang

估计是你没删完吧;或者是没有更新协议?还是有别的问题

该问题目前已经被锁定, 无法添加新回复