k***@qq.com
k***@qq.com
  • 发布:2017-03-17 08:59
  • 更新:2017-03-17 11:10
  • 阅读:2260

已上线的 APP,收到苹果 App Store 发来审核不合格的邮件

分类:HBuilder

邮件内容:

Dear Developer,

Your app, extension, and/or linked framework appears to contain code designed explicitly with the capability to change your app’s behavior or functionality after App Review approval, which is not in compliance with section 3.3.2 of the Apple Developer Program License Agreement and App Store Review Guideline 2.5.2. This code, combined with a remote resource, can facilitate significant changes to your app’s behavior compared to when it was initially reviewed for the App Store. While you may not be using this functionality currently, it has the potential to load private frameworks, private methods, and enable future feature changes.

This includes any code which passes arbitrary parameters to dynamic methods such as dlopen(), dlsym(), respondsToSelector:, performSelector:, method_exchangeImplementations(), and running remote scripts in order to change app behavior or call SPI, based on the contents of the downloaded script. The Objective-C methods respondsToSelector: and performSelector: are still supported and allowed. For example, they can be used to check OS compatibilty before using a selector. However, you should only pass selectors to these methods, which are specified at compile time. If you think you are using static selectors, it’s possible a third-party framework you’ve added to your app is not in compliance. Even if the remote resource is not intentionally malicious, it could easily be hijacked via a Man In The Middle (MiTM) attack, which can pose a serious security vulnerability to users of your app.

Please perform an in-depth review of your app and remove any code, frameworks, or SDKs that fall in line with the functionality described above before submitting the next update for your app for review.

Best regards,

App Store Review

=========================================

邮件的大概意思是 APP 使用了一些第三方的框架或SDK会使得 APP 在后期可以更改显示的内容等,
有没有人也收到类似邮件?该如何解决?

2017-03-17 08:59 负责人:无 分享
已邀请:
leeH

leeH

你有用个推,高德之类的SDK吗? 这些SDK本身含有热更新,去他们网站下载最新的包,替换就可以了。

爆栈工程师

爆栈工程师 - 爆栈工程师

关注一下

BoredApe
  • qsddqd

    您好我的app并未使用个推高德,仍然收到这个警告,用的离线打包,请问是要删除这两个sdk吗

    2017-03-17 11:17

该问题目前已经被锁定, 无法添加新回复