ios - WebViewJavascriptBridge 和应用程序拒绝

Question

使用WebViewJavaScriptBridge在 iOS 应用程序中，根据一些拒绝评论

Any code which passes arbitrary parameters to dynamic methods such asdlopen(), dlsym(), respondsToSelector:, performSelector:,method_exchangeImplementations(), and running remote scripts in orderto change app behavior or call SPI, based on the contents of thedownloaded script. Even if the remote resource is not intentionallymalicious, it could easily be hijacked via a Man In The Middle (MiTM)attack, which can pose a serious security vulnerability to users ofyour app.

我们注意到这个库中很少出现 dlopen 方法，

dlopen("/System/Library/Frameworks/WebKit.framework/WebKit", RTLD_LAZY);

有人遇到过这个库被拒绝的问题。

引用号:https://github.com/marcuswestin/WebViewJavascriptBridge/search?utf8=✓&q=dlopen&type=

谢谢

Answer 1

该应用程序已获得批准，并且 WebViewJavaScriptBridge 对我们来说运行良好。