当前位置:网站首页>Cordova plugin device obtains the device information plug-in, which causes Huawei to fail the audit
Cordova plugin device obtains the device information plug-in, which causes Huawei to fail the audit
2022-07-03 00:40:00 【kenick】
1. cause
It was found that , Your application has the ability to get users 【ANDROID ID】 Sensitive information behavior , And not in the application privacy policy / stay AppGallery Connect The privacy policy website submitted on , It does not meet Huawei's application market audit standards .
2. analysis
The stack call information obtained from Huawei is :
"stackTrace":[
"org.apache.cordova.device.Device.getUuid(Device.java:112)",
"org.apache.cordova.device.Device.initialize(Device.java:58)",
"org.apache.cordova.CordovaPlugin.privateInitialize(CordovaPlugin.java:57)",
"org.apache.cordova.PluginManager.getPlugin(PluginManager.java:171)",
"org.apache.cordova.PluginManager.exec(PluginManager.java:122)",
"org.apache.cordova.CordovaBridge.jsExec(CordovaBridge.java:59)",
"org.apache.cordova.engine.SystemExposedJsApi.exec(SystemExposedJsApi.java:41)",
"android.os.MessageQueue.nativePollOnce(NativeMethod)",
"android.os.MessageQueue.next(MessageQueue.java:374)",
"android.os.Looper.loop(Looper.java:185)",
"android.os.HandlerThread.run(HandlerThread.java:67)"
]
After searching for information , In the project platforms\android\app\src\main\java\org\apache\cordova\device\Device.java There is a problem with the initialization method of this class in .
Because we get uuid, As a result, although there is control over acquisition in the project ( You must first obtain user authorization ), But as soon as you enter app, Before obtaining user authorization , We have already obtained uuid.
3. resolvent
1. Discard the plug-in (cordova-plugin-device), It is applicable to situations that have little impact on business and logic ;
2. Continue to use the plug-in , Modify the plug-in to get the native device ID The way , It is applicable to devices with complex upper logic ID When the requirements are not very strict .
3. Custom plug in , And upload them to cordova Community , The best way , Invest more .
边栏推荐
- About the practice topic of screen related to unity screen, unity moves around a certain point inside
- Automated defect analysis in electronic microscopic images
- Graduation summary
- 【AutoSAR 八 OS】
- Multiprocess programming (4): shared memory
- form表单实例化
- Multiprocess programming (II): Pipeline
- UART、RS232、RS485、I2C和SPI的介绍
- Overlay of shutter (Pop-Up)
- helm 基础学习
猜你喜欢

Rust ownership (very important)

Confluence的PDF导出中文文档异常显示问题解决

Bigder: how to deal with the bugs found in the 32/100 test if they are not bugs

【单片机项目实训】八路抢答器

文件操作IO-Part2

【雅思阅读】王希伟阅读P1(阅读判断题)

mm中的GAN模型架构

CMake基本使用

AEM: Nanlin fan Ben et al. - plant rhizosphere growth promoting bacteria control soybean blight

Explain in detail the significance of the contour topology matrix obtained by using the contour detection function findcontours() of OpenCV, and how to draw the contour topology map with the contour t
随机推荐
Array de duplication
Some introduction and precautions about XML
利亚德:Micro LED 产品消费端首先针对 100 英寸以上电视,现阶段进入更小尺寸还有难度
The "2022 China Digital Office Market Research Report" can be downloaded to explain the 176.8 billion yuan market in detail
University of Toronto:Anthony Coache | 深度强化学习的条件可诱导动态风险度量
Install docker and use docker to install MySQL
[shutter] Introduction to the official example of shutter Gallery (project introduction | engineering construction)
Rust string slicing, structs, and enumeration classes
Use Jenkins II job
Wechat applet obtains the information of an element (height, width, etc.) and converts PX to rpx.
Shell implements basic file operations (cutting, sorting, and de duplication)
Automated defect analysis in electronic microscopic images
可下载《2022年中国数字化办公市场研究报告》详解1768亿元市场
helm 基础学习
详解用OpenCV的轮廓检测函数findContours()得到的轮廓拓扑结构(hiararchy)矩阵的意义、以及怎样用轮廓拓扑结构矩阵绘制轮廓拓扑结构图
cordova-plugin-device获取设备信息插件导致华为审核不通过
Maya fishing house modeling
2022中国3D视觉企业(引导定位、分拣场景)厂商名单
[MCU project training] eight way answering machine
Multi process programming (III): message queue