苹果审核未通过的内容为:
Guideline 2.3.1 - Performance
We discovered that your app contains hidden features.
Specifically, it would be appropriate to remove any and all remote code importing and code obfuscation or selector mangling, such as this app’s [PDRCoreApp doDownloadWap2app] method and [KCZLFCxPxTbjxx bpXErxxkoMxIeO::] method, before resubmitting for review. It may be appropriate to review any third party frameworks that the app is using as these may contribute to the guideline 2.3.1 and 2.5.2 concerns.
The next submission of this app may require a longer review time, and this app will not be eligible for an expedited review until this issue is resolved.
Guideline 2.5.2 - Performance - Software Requirements
Your app, extension, or linked framework appears to contain code designed explicitly with the capability to change your app’s behavior or functionality after App Review approval, which is not in compliance with App Store Review Guideline 2.5.2 and section 3.3.2 of the Apple Developer Program License Agreement.
This code, combined with a remote resource, can facilitate significant changes to your app’s behavior compared to when it was initially reviewed for the App Store. While you may not be using this functionality currently, it has the potential to load private frameworks, private methods, and enable future feature changes. This includes any code which passes arbitrary parameters to dynamic methods such as dlopen(), dlsym(), respondsToSelector:, performSelector:, method_exchangeImplementations(), and running remote scripts in order to change app behavior and/or call SPI, based on the contents of the downloaded script. Even if the remote resource is not intentionally malicious, it could easily be hijacked via a Man In The Middle (MiTM) attack, which can pose a serious security vulnerability to users of your app.
目前使用第三方包有 js-base64,mp-html,uview-ui,未使用任何原生插件,未使用热更新,项目一开始是用cli创建,已执行 npx @dcloudio/uvm 更新到最新版本,目前使用 hbuild 3.3.11 版本安心打包。
查找打包后的文件,确实发现了 dlopen 函数,请问这是需要怎么调整修改?
DCloud_UNI_GSQ
很有用的信息,置顶供其他人参考。
2022-04-06 11:10
freehippo (作者)
回复 DCloud_UNI_GSQ: 虽然上架成功,但根本问题还是没解决,推送功能早晚得加回去,可以将这个信息反馈给个推么
2022-04-07 10:16
DCloud_UNI_GSQ
回复 freehippo: 目前无其他人反馈类似问题,尝试添加后重新提交审核。
2022-04-08 20:22