gxg
gxg
  • 发布:2017-12-01 10:52
  • 更新:2017-12-01 11:01
  • 阅读:1192

用了5+sdk,说我的代码具有热更新的能力,不通过。搞不懂怎么改了。

分类:5+ SDK

说我的代码具有热更新的能力,不通过。搞不懂怎么改了。
Guideline 2.5.2 - Performance - Software Requirements

This code, combined with a remote resource, can facilitate significant changes to your app’s behavior compared to when it was initially reviewed for the App Store. While you may not be using this functionality currently, it has the potential to load private frameworks, private methods, and enable future feature changes. This includes any code which passes arbitrary parameters to dynamic methods such as dlopen(), dlsym(), respondsToSelector:, performSelector:, method_exchangeImplementations(), and running remote scripts in order to change app behavior and/or call SPI, based on the contents of the downloaded script. Even if the remote resource is not intentionally malicious, it could easily be hijacked via a Man In The Middle (MiTM) attack, which can pose a serious security vulnerability to users of your app.

2017-12-01 10:52 负责人:无 分享
已邀请:
Trust

Trust - 少说废话

sdk是最新的么?提供下5+sdk的版本,可能是之前旧版本的个推这些模块里面自己的热更新。

  • gxg (作者)

    是十月份下载的版本。那么,如果我在xcode里把个推相关的代码和库都删掉,能解决问题么。

    2017-12-01 11:07

  • Trust

    回复 gxg:上传一个你打包出来的ipa包

    2017-12-01 12:15

  • gxg (作者)

    回复 Trust:刚刚下载了新sdk,10月27日的getuisdk修复了热更新的问题?

    2017-12-01 13:39

  • Trust

    回复 gxg:嗯,很早就修复了呀。

    2017-12-01 13:59

gxg

gxg (作者)

是十月份下载的版本。

该问题目前已经被锁定, 无法添加新回复