3.8節(jié)一大早相信不少iOS開發(fā)者都收到了來自Apple的一封警告郵件：
Dear Developer,Your app, extension, and/or linked framework appears to contain code designed explicitly with
the capability to change your app’s behavior or functionality after App Review approval, which is not in
compliance with section 3.3.2 of the [Apple Developer Program License Agreement]
(https://itunesconnect.apple.com/WebObjects/iTunesConnect.woa/ra/ng/%E2%80%9Chttps://developer.apple.com/terms/%E2%80%9C) and [App Store Review Guideline 2.5.2]
(https://itunesconnect.apple.com/WebObjects/iTunesConnect.woa/ra/ng/%E2%80%9Chttps://developer.apple.
com/app-store/review/guidelines/#software-requirements”). This code, combined with a remote resource, can
facilitate significant changes to your app’s behavior compared to when it was initially reviewed for the App
Store. While you may not be using this functionality currently, it has the potential to load private frameworks,
private methods, and enable future feature changes. This includes any code which passes arbitrary
parameters to dynamic methods such as dlopen(), dlsym(), respondsToSelector:, performSelector:,
method_exchangeImplementations(), and running remote scripts in order to change app behavior or call SPI,
based on the contents of the downloaded script. Even if the remote resource is not intentionally malicious, it
could easily be hijacked via a Man In The Middle (MiTM) attack, which can pose a serious security
vulnerability to users of your app.Please perform an in-depth review of your app and remove any code,
frameworks, or SDKs that fall in line with the functionality described above before submitting the next update
for your app for review.Best regards,App Store Review
更新一下喷橙，最近了解到的一些進展啥么。
蘋果此舉主要是針對一些在線下發(fā)腳本動態(tài)改變App行為的機制。
Paste_Image.png
Paste_Image.png
- JSPatch受影響么
了解到的JSPatch最新版本肯定是受影響的贰逾。一家國外的服務Rollout.io也同樣受影響悬荣。
- 沒有使用JSPatch也收到警告了
一些三方SDK會使用JSPatch一些機制。
Paste_Image.png
- RN受影響么
官方SDK是不受影響的疙剑。
Paste_Image.png
- buglyHotfix
暫未受影響氯迂。
- runtime的相關(guān)API還可以用么
可以践叠。主要針對腳本下發(fā)動態(tài)修改App行為做封殺。
- 為什么我沒有收到郵件
1.沒有使用到上述這些違反Apple審核規(guī)則的機制嚼蚀。
2.你的開發(fā)者賬號還沒有接受最新的開發(fā)者協(xié)議禁灼。
Paste_Image.png
相關(guān)鏈接：
