Comments (4)
I'm suspicious of this claim. I'm also poorly informed about the new privacy manifest, etc.
But third_party/boringssl/src/crypto/x509/by_dir.c
is only accessed during the build process.
The file is NOT shipped into application, as far as I understand how iOS applications are shipped.
I'll admit I have limited knowledge here and this is not my area of expertise.
Please clarify what and why you think this is necessary, be specific. Output from a generic analyzer without clear steps on how to reproduce and minimal reproduction example is not helpful.
from webcrypto.dart.
Fair, let me get back to this once we submit our next release for review.
Context: our latest submission (prior to May 1) got a warning that soon we will need to define why our app uses NSPrivacyAccessedAPICategoryUserDefaults
(which is not the one in the issue description: NSPrivacyAccessedAPICategoryFileTimestamp
). So I looked around and found this analyzer (that I've linked) which nicely outputted similar result, and also some other potentially missing information. (like webrypto's)
In order to be consistent I leaned to resolve all the reported warnings, and because I found similar issues for other packages (requiring privacy manifest) I went ahead and created one for webcrypto myself.
It could very well be that this is a false positive from the analyzer, as you say this is not shipped into the app. I also have limited knowledge about these, especially since this is some new requirement that app developers need to comply to.
Once the next review comes back I'll update this ticket, most probably it can be closed, as initially we did not get the warning for the NSPrivacyAccessedAPICategoryFileTimestamp
API.
from webcrypto.dart.
Cool, please do let us know how it plays out.
Feel free to ping me if there is anything actionable, full disclosure I don't always manage to follow chatter on issues when not explicitly mentioned.
from webcrypto.dart.
The review process went through without an issue! ✅
from webcrypto.dart.
Related Issues (20)
- Upgrade flutter_lints
- debug intermittent iOS integration tests HOT 1
- Figure out how to enable LTO on Android
- Give access to the authorization tag in AES-GCM mode HOT 2
- EcdsaPrivateKey.importRawKey unavailable HOT 1
- Make dartdoc examples self-contained. HOT 1
- Documentation for AES-GCM should discourage AES-192 and encourage nonce size 96 (12 bytes) HOT 1
- Add .toString() methods on all private classes HOT 7
- Avoid @sealed annotation, using `final class` for everything HOT 3
- Validate JWK for HmacSecretKey Class HOT 2
- Upgrade BoringSSL
- Consider using [!NOTE] blockquote for browser/platform compatibility notes HOT 10
- Re-enable `flutter test --platform chrome` on Windows
- Migrate away from imperative apply of Flutter's Gradle plugins
- Tests if P-521 works on Safari
- Document the maximum length in EcdhPrivateKey.deriveBits for each curve HOT 1
- Add test coverage collection with coveralls
- error.0400008d.RSA routines.OPENSSL_internal.TOO_MANY_ITERATIONS HOT 2
- Investigate if we can use `dartPluginClass`
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from webcrypto.dart.