pwlin / cordova-plugin-file-opener2

A File Opener Plugin for Cordova
MIT License
314 stars 587 forks source link

suggestion to remove REQUEST_INSTALL_PACKAGES #333

Closed laurentperez closed 1 year ago

laurentperez commented 1 year ago

We've had an app review rejected from Google Play reviewer because of REQUEST_INSTALL_PACKAGES being "too broad"

Evil apps will attempt to masquerade their real behaviour and install 3rd party apks, like online gambling or casino games. This is a well reported thing by store security researchers.

I suggest the permission to be removed by default to prevent possible app review rejections.

andreagobetti commented 1 year ago

Duplicated of https://github.com/pwlin/cordova-plugin-file-opener2/pull/330 and https://github.com/pwlin/cordova-plugin-file-opener2/pull/332

fireonmac commented 1 year ago

I did the same but my app still got rejected. After this change dId your app got approved successfully?

laurentperez commented 1 year ago

@fireonmac yes but we had to trigger an Appeal process.

richardshergold commented 1 year ago

Is there going to be a new release of the plugin with this fix in any time soon?

phyr0s commented 1 year ago

You can use my fork --> https://github.com/phyr0s/cordova-plugin-file-opener2.git

shnist commented 1 year ago

this has been fixed in the latest release