小小菜76055421
小小菜76055421
  • 发布:2022-12-14 16:08
  • 更新:2023-01-03 11:06
  • 阅读:1396

【报Bug】3.6.13打包App,用户未同意隐私政策前提前获取权限

分类:uni-app

产品分类: uniapp/App

PC开发环境操作系统: Windows

PC开发环境操作系统版本号: windows10

HBuilderX类型: 正式

HBuilderX版本号: 3.6.13

手机系统: Android

手机系统版本号: Android 12

手机厂商: 华为

手机机型: mate10pro

页面类型: vue

vue版本: vue3

打包方式: 云端

项目创建方式: HBuilderX

操作步骤:

正常云打包

预期结果:

隐私政策未同意前,不获取用户相关权限

实际结果:

提前获取用户相关权限

bug描述:

在用户同意隐私政策前,您的应用获取了用户的设备ID,IMSI,MAC地址,ANDROID ID; 应用内集成的[穿山甲、巨量引擎]SDK获取应用安装列表,IMSI,MAC地址,IMEI,ANDROID ID; 应用内集成的[广点通、优量汇、腾讯广告]SDK获取ANDROID ID; 应用内集成的[个推、个数应用统计、个像]SDK获取应用安装列表,MAC地址,ANDROID ID,不符合华为应用市场审核标准。

2022-12-14 16:08 负责人:DCloud_Android_YJC 分享
已邀请:

最佳回复

DCloud_Android_YJC

DCloud_Android_YJC

此问题的处理方案:

  1. 检查隐私政策弹框是否为template模式
  2. 目前了解到的情况大概率是平台误报,重新提审即可
  • zheng郑超

    遇到了类似的隐私权限问题,调用堆栈如下

    [{"detail":["android.text.util.Linkify->gatherTelLinks","android.text.util.Linkify->addLinks","android.text.util.Linkify->addLinks","android.widget.TextView->setText","android.widget.TextView->setText","android.widget.TextView->setText","io.dcloud.common.ui.a$c->b","io.dcloud.common.ui.a$c->a","io.dcloud.common.ui.a->e","io.dcloud.common.ui.b->a","io.dcloud.b->onCreate"],"sdk":[]}]


    备案审核确诊Linkify->gatherTelLinks调用了获取sim卡国家信息。我 查了下这个问题就是在dcloud的隐私权限弹窗中触发的,真是尴尬,隐私权限弹窗获取了用户隐私。

    2023-01-13 16:26

DCloud_Android_YJC

DCloud_Android_YJC

隐私政策弹框是否为template模式?

55Y音乐社区

55Y音乐社区

我也是昨晚提交的,刚收到和你一样的回复

未通过原因:
在用户同意隐私政策前,您的应用获取了用户的设备ID,IMSI,MAC地址,ANDROID ID; 应用内集成的[穿山甲、巨量引擎]SDK获取IMSI,MAC地址,IMEI,ANDROID ID; 应用内集成的[广点通、优量汇、腾讯广告]SDK获取ANDROID ID,不符合华为应用市场审核标准。
修改建议:请在用户同意隐私政策后,再申请获取用户个人信息及权限。
请参考《审核指南》第7.5相关审核要求:https://developer.huawei.com/consumer/cn/doc/50104
APP常见个人信息保护问题FAQ请参考:
https://developer.huawei.com/consumer/cn/doc/distribution/app/FAQ-faq#h2-1628498414951-0
测试环境:Wi-Fi联网、EMUI11.0(Mate 40Pro)、中文环境;

l***@126.com

l***@126.com

遇到了同样的问题

尊敬的开发者,您好!
应用上架需确保在用户同意隐私政策后再进行接口调用和个人信息获取,请查收如下调用栈,
最终请以审核结果为准。感谢您的支持与理解!
未同意隐私政策,应用收取访问大致位置权限
[androidx.core.app.ActivityCompat.requestPermissions(ActivityCompat.java:502),
 io.dcloud.common.core.permission.PermissionControler.runRequestPermissions(Unknown Source:6),
 io.dcloud.common.core.permission.PermissionControler.requestPermissions(Unknown Source:7),
 io.dcloud.common.adapter.util.PermissionUtil.requestPermissions(Unknown Source:1),
 io.dcloud.common.adapter.util.PermissionUtil.requestSystemPermissions(Unknown Source:23),
 io.dcloud.common.adapter.util.PermissionUtil.requestSystemPermissions(Unknown Source:1),
 io.dcloud.common.adapter.util.PermissionUtil.useSystemPermission(Unknown Source:14),
 io.dcloud.common.adapter.util.PermissionUtil.usePermission(Unknown Source:16),
 io.dcloud.js.geolocation.GeolocationFeatureImpl.execute(Unknown Source:6),
 io.dcloud.g.b.a(Unknown Source:141),
 io.dcloud.g.b.b(Unknown Source:3)

未同意隐私政策,应用收取访问精确位置权限
[androidx.core.app.ActivityCompat.requestPermissions(ActivityCompat.java:502),
 io.dcloud.common.core.permission.PermissionControler.runRequestPermissions(Unknown Source:6),
 io.dcloud.common.core.permission.PermissionControler.requestPermissions(Unknown Source:7),
 io.dcloud.common.adapter.util.PermissionUtil.requestPermissions(Unknown Source:1),
 io.dcloud.common.adapter.util.PermissionUtil.requestSystemPermissions(Unknown Source:23),
 io.dcloud.common.adapter.util.PermissionUtil.requestSystemPermissions(Unknown Source:1),
 io.dcloud.common.adapter.util.PermissionUtil.useSystemPermission(Unknown Source:14),
 io.dcloud.common.adapter.util.PermissionUtil.usePermission(Unknown Source:16),
 io.dcloud.js.geolocation.GeolocationFeatureImpl.execute(Unknown Source:6),
 io.dcloud.g.b.a(Unknown Source:141),
 io.dcloud.g.b.b(Unknown Source:3)

未同意隐私政策,应用内集成的[个推、个数应用统计、个像]SDK获取应用安装列表
[java.lang.ProcessBuilder.start(ProcessBuilder.java:1029),
 java.lang.Runtime.exec(Runtime.java:699),
 java.lang.Runtime.exec(Runtime.java:529),
 java.lang.Runtime.exec(Runtime.java:426),
 java.lang.reflect.Method.invoke(Native Method),
 com.getui.gtc.dim.e.c.a(Unknown Source:72),
 com.getui.gtc.dim.c.a.g(Unknown Source:18),
 com.getui.gtc.dim.a.a(Unknown Source:1944),
 com.getui.gtc.dim.a.a(Unknown Source:79),
 com.getui.gtc.dim.DimManager.get(Unknown Source:11),
 com.igexin.push.extension.distribution.gbd.k.b.a(Unknown Source:46)

未同意隐私政策,应用内集成的[个推、个数应用统计、个像]SDK获取ANDROID ID
[com.getui.gtc.dim.c.a.d(Unknown Source:6),
 com.getui.gtc.dim.a.a(Unknown Source:2269),
 com.getui.gtc.dim.DimManager.get(Unknown Source:11),
 com.g.gysdk.a.ah.a(Unknown Source:22),
 com.g.gysdk.a.ag.c(Unknown Source:61),
 com.g.gysdk.a.ag.a(Unknown Source:37),
 com.g.gysdk.a.y$a.<init>(Unknown Source:21),
 com.g.gysdk.a.y.a(Unknown Source:3),
 com.g.gysdk.a.s$5.run(Unknown Source:0),
 java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1167),
 java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:641)

未同意隐私政策,应用内集成的[个推、个数应用统计、个像]SDK获取MAC地址
[com.getui.gtc.dim.c.a.h(Unknown Source:37),
 com.getui.gtc.dim.a.a(Unknown Source:2143),
 com.getui.gtc.dim.DimManager.get(Unknown Source:11),
 com.igexin.push.extension.distribution.gbd.k.o.c(Unknown Source:33),
 com.igexin.push.extension.distribution.gbd.k.l.c(Unknown Source:21),
 com.igexin.push.extension.distribution.gbd.a.b.c.a(Unknown Source:243),
 com.igexin.push.extension.distribution.gbd.a.b.c.a(Unknown Source:64),
 com.igexin.push.extension.distribution.gbd.a.b.e.a(Unknown Source:11),
 com.igexin.push.extension.distribution.gbd.a.b.e.a(Unknown Source:44),
 com.igexin.push.extension.distribution.gbd.a.b.e.a(Unknown Source:140),
 com.igexin.push.extension.distribution.gbd.a.b.c$a.run(Unknown Source:100)

k***@163.com

k***@163.com

我是昨天提交的小米应用市场,收到一样的回复
然后我又联系小米市场人工复测了,得到的回复如下:
小米同学核实您的应用隐私复测未通过。

具体为:用户同意授权前存在收集Android ID、IMEI、安装列表、位置、设备序列号、传感器、MAC的行为。

辛苦您将授权前行为修改为授权后。

  • h***@163.com

    我这边小米的也一样

    2023-01-03 11:13

  • DCloud_Android_YJC

    HBuilderX 3.6.13+版本(HBuilderX 3.6.10+ alpha版本) 打包出现未同意隐私政策收集隐私信息导致无法上架问题的处理:

    如果是"第一次拒绝隐私政策后,应用退出,再次启动应用未弹出隐私弹框"的情况,androidPrivacy.json中添加如下配置



    "disagreeMode":{
    "showAlways": true
    }

    2023-01-03 11:44

  • 张小逗

    回复 DCloud_Android_YJC: 改了也是一样的

    2023-06-09 15:52

该问题目前已经被锁定, 无法添加新回复