apache - Google App Store 警告 - 您应该尽快升级到 Apache Cordova 3.5.1 或更高版本

Question

我收到了一封来自 Google Play 商店的针对我的 Android 应用程序的电子邮件:

This is a notification that your com.mydomain.myapp, is built on a version of Apache Cordova that contains security vulnerabilities. This includes a high severity cross-application scripting (XAS) vulnerability. Under certain circumstances, vulnerable apps could be remotely exploited to steal sensitive information, such as user login credentials. You should upgrade to Apache Cordova 3.5.1 or higher as soon as possible. For more information about the vulnerabilities, and for guidance on upgrading Apache Cordova, please see http://cordova.apache.org/announcements/2014/08/04/android-351.html. Please note, applications with vulnerabilities that expose users to risk of compromise may be considered “dangerous products” and subject to removal from Google Play. Regards, Google Play Team ©2014 Google Inc. 1600 Amphitheatre Parkway Mountain View, CA 94043

如果我尝试给定链接/页面上提到的命令，即:

cordova platform add android@3.5.1 --usenpm

我收到错误:

Platform android already added

如何将 Cordova 从 3.1 升级到 3.5.1？我尝试过各种各样的事情，例如:

npm update -g cordova

但我似乎并没有取得成功。 MyApp\platforms\android\cordova 文件夹中的版本文件仍然显示以下条目，并且该文件夹中没有文件更改:

// Coho updates this line:
var VERSION = "3.1.0";

console.log(VERSION);

Answer 1

经过一番研究，我想，我在这里找到了解决方案:

http://cordova.apache.org/index.html#download

npm install -g cordova
cd my_project
cordova platform update android

运行最后一个命令可以解决问题，我得到以下响应:

**cordova platform update android**
Deleting E:/PhoneGap/my_project/platforms/android/libs/cordova-3.1.0.jar
Android project is now at version 3.6.3
If you updated from a pre-3.2.0 version and use an IDE, we now require that you
import the "CordovaLib" library project.

希望有帮助。

问候