search

wonday / react-native-pdf

A <Pdf /> component for react-native
MIT License
1.6k stars 553 forks source link

Unsafe implementation of HostnameVerifier by RN-fetch-blob #544

Open jvillalo opened 3 years ago

jvillalo commented 3 years ago

What react-native version are you using? 0.62.2 What react-native-pdf version are you using? 6.0.1 What platform does your issue occur on? (android/ios/both) android Describe your issue as precisely as possible :

The Google Play store keeps rejecting our application because of an unsafe implementation of HostnameVerifier, which can be traced to RN-fetch-blob, which we only implement indirectly through react-native-pdf. We already set he property “trustAllCerts” to false, but it's still apparently not enough, and the app keeps being rejected. We even patched change the implementation of the verify method to always return false, to no avail. Given that RN-fetch-blob is no longer being maintained, we can't expect any fix from their side. Is this a known issue? and do you have any recommendation on how to proceed? And are there any plans for the project to move on from RN-fetch-blob?

vikas5914 commented 3 years ago

@jvillalo I am also looking for a solution. I will publish a few apps in the upcoming months. I checked lots of plugin and fork of multiple libraries. I believe the best solution is to use expo-file-system for download. With expo, you have the possibility of getting updates for the long future.