razorpay / razorpay-capacitor

Capacitor wrapper around Razorpay's Android and iOS SDKs
https://www.npmjs.com/package/com.razorpay.capacitor
12 stars 28 forks source link

Playstore Update Rejected - Your app contains an intent redirection vulnerability #61

Closed skadimoolam closed 1 year ago

skadimoolam commented 1 year ago

Hi there,

Today an update to our Capacitor app was rejected by the play store.

Please check these images image

image

We use the latest 1.2.0 version of capacitor-razorpay package with Vite 4

This seems to be an issue downstream in the razorpay's android SDK, or I might be wrong.

What could cause this issue and how to fix it?

Thank You.

abuhurairalakdawala commented 1 year ago

I am facing the same issue since today. @skadimoolam were you able to solve this ?

skadimoolam commented 1 year ago

@abuhurairalakdawala I've not been able to solve this issue, but for us we have to ship this update, so I took another build of the same app and uploaded to google, it showed the same error on Google play Admin but also published the update.

I tried to downgrade the Razorpay Checkout version manually but it did not help.

ratnamyadav commented 1 year ago

I am also facing same issue for the new app i am deploying to play store.

abuhurairalakdawala commented 1 year ago

Ok, this has to be fixed from this package. Need someone from contributor of this repo to help. Can someone tag those who can help ?

skadimoolam commented 1 year ago

@vivekshindhe @Nautiyalsachin

vivekshindhe commented 1 year ago

Hey folks, we noticed this issue and have fixed it. Please reinstall the package and upload to playstore.

skadimoolam commented 1 year ago

Hi @vivekshindhe

Yes, I can confirm that it's no longer an issue, I just pushed an update to one of my apps and it did show the same error.

@abuhurairalakdawala @ratnamyadav

vivekshindhe commented 1 year ago

Hey, @skadimoolam just to clarify. You are not facing this issue anymore right?

skadimoolam commented 1 year ago

Yes, this issue is no more. After updating the com.razorpay:Checkout package