Google Play Store Security Alert Says that your app contains Vulnerable JavaScript libraries how to remove the security warning?

后端 未结 4 1055
小鲜肉
小鲜肉 2021-01-04 06:21

In Google Play Store am getting warning below like this,

Your app contains one or more libraries with known security issues. Please see this Google Help Center artic

4条回答
  •  萌比男神i
    2021-01-04 06:34

    1. uses the latest jquery v3.4.0+
    2. if the old jquery v1.x/v2.x must be used because your codes or the 3rd party libraries dependence (like jquery mobile etcs), you can take a patch from DanielRuf's snyk-js-jquery-174006 (*)

    (*) but I am not sure how Google finds the jquery file in apk has vulnerability and been patched...needs to test(**)

    2/1/2020 updated: use above method 2 patched file can't avoid the Google alert checking. Removes the first comment line

    /*! jQuery v2.2.4 | (c) jQuery Foundation | jquery.org/license */
    

    inside the jquery-2.2.4.min.js (and I also rename to jquery-patched.2.2.4.min.js) seems worked in my new release. (and this worked even on the unpatched file in my test, it should better make a patch)

提交回复
热议问题