bang590 / JSPatch

JSPatch bridge Objective-C and Javascript using the Objective-C runtime. You can call any Objective-C class and method in JavaScript by just including a small engine. JSPatch is generally used to hotfix iOS App.
MIT License
11.37k stars 2.24k forks source link

JSPatch使用官网的的1.7.5版本,审核被查出来了,客服还来了电话说用到了热更新。。 #831

Closed tuluigi closed 6 years ago

pkjews commented 6 years ago

也遇到了,求解决

LKTheMaster commented 6 years ago

+1, 上个版本还能过的, 昨天提审直接说是guideLine 2.5.2

bang590 commented 6 years ago

目前我们正在解决,提交审核请先去除SDK,等待SDK更新下版本接入。

Luis-X commented 6 years ago

2018年8月14日 上午10:27 发件人 Apple Other Dear Developer,

Your app, extension, and/or linked framework appears to contain code designed explicitly with the capability to change your app’s behavior or functionality after App Review approval, which is not in compliance with section 3.3.2 of the Apple Developer Program License Agreement and App Store Review Guideline 2.5.2. This code, combined with a remote resource, can facilitate significant changes to your app’s behavior compared to when it was initially reviewed for the App Store. While you may not be using this functionality currently, it has the potential to load private frameworks, private methods, and enable future feature changes.

This includes any code which passes arbitrary parameters to dynamic methods such as dlopen(), dlsym(), respondsToSelector:, performSelector:, method_exchangeImplementations(), and running remote scripts in order to change app behavior or call SPI, based on the contents of the downloaded script. Even if the remote resource is not intentionally malicious, it could easily be hijacked via a Man In The Middle (MiTM) attack, which can pose a serious security vulnerability to users of your app.

Please perform an in-depth review of your app and remove any code, frameworks, or SDKs that fall in line with the functionality described above.

To ensure there is no interruption of the availability of your app on the App Store, please submit an update within 30 days of the date of this message. If we do not receive an update within 30 days, your app may be removed from sale.

Best regards,

App Store Review

Luis-X commented 6 years ago

⚠️和2017年一样,又被发了警告,Bang神求助~~~

bang590 commented 6 years ago

请先去除,我们会推出新版本SDK

bang590 commented 6 years ago

已解决,请接入1.8.0版本 https://jspatch.com/Index/sdk