nordnet/cordova-hot-code-push

Problem About Apple App Store Review

Closed this issue · 2 comments

cannot be reviewed

Firstly, thanks for the author of this fantastic plugin.
Recently,I submit a new version to Apple App Store.2 days later,the version is rejected with the following replay:
“This code, combined with a remote resource, can facilitate significant changes to your app’s behavior compared to when it was initially reviewed for the App Store. While you may not be using this functionality currently, it has the potential to load private frameworks, private methods, and enable future feature changes. This includes any code which passes arbitrary parameters to dynamic methods such as dlopen(), dlsym(), respondsToSelector:, performSelector:, method_exchangeImplementations(), and running remote scripts in order to change app behavior and/or call SPI, based on the contents of the downloaded script. Even if the remote resource is not intentionally malicious, it could easily be hijacked via a Man In The Middle (MiTM) attack, which can pose a serious security vulnerability to users of your app.”

Problem

Is this plugin violates Apple App Store policy now?
Thank You !

This must be new I already have three apps in the store using this plugin. did you have any prompt that ask user to update or notify user about new update through the plugin?

No any prompt in my app.I guess this is Apple's new policy.Thank you! @abdohossam5