Giter Club home page Giter Club logo

Comments (4)

jonasfj avatar jonasfj commented on July 28, 2024 1

I'm suspicious of this claim. I'm also poorly informed about the new privacy manifest, etc.

But third_party/boringssl/src/crypto/x509/by_dir.c is only accessed during the build process.
The file is NOT shipped into application, as far as I understand how iOS applications are shipped.
I'll admit I have limited knowledge here and this is not my area of expertise.

Please clarify what and why you think this is necessary, be specific. Output from a generic analyzer without clear steps on how to reproduce and minimal reproduction example is not helpful.

from webcrypto.dart.

harkairt avatar harkairt commented on July 28, 2024 1

Fair, let me get back to this once we submit our next release for review.
Context: our latest submission (prior to May 1) got a warning that soon we will need to define why our app uses NSPrivacyAccessedAPICategoryUserDefaults (which is not the one in the issue description: NSPrivacyAccessedAPICategoryFileTimestamp). So I looked around and found this analyzer (that I've linked) which nicely outputted similar result, and also some other potentially missing information. (like webrypto's)
In order to be consistent I leaned to resolve all the reported warnings, and because I found similar issues for other packages (requiring privacy manifest) I went ahead and created one for webcrypto myself.

It could very well be that this is a false positive from the analyzer, as you say this is not shipped into the app. I also have limited knowledge about these, especially since this is some new requirement that app developers need to comply to.

Once the next review comes back I'll update this ticket, most probably it can be closed, as initially we did not get the warning for the NSPrivacyAccessedAPICategoryFileTimestamp API.

from webcrypto.dart.

jonasfj avatar jonasfj commented on July 28, 2024

Cool, please do let us know how it plays out.

Feel free to ping me if there is anything actionable, full disclosure I don't always manage to follow chatter on issues when not explicitly mentioned.

from webcrypto.dart.

harkairt avatar harkairt commented on July 28, 2024

The review process went through without an issue! ✅

from webcrypto.dart.

Related Issues (20)

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.