News for hackers. Stuff that matters.

bioshock

Re:JavaScript Injection Approval Process for IOS on Tuesday March 14, 2017 @12:23PM (#13868873)
Also, just saw this (see below), another example of JS injection using CodePush (by MSFT) and RN, Apple seems to fine with this....doesn't this have them same security issue?

https://blog.bugsnag.com/react-native-plus-code-push/

Re:JavaScript Injection Approval Process for IOS on Tuesday March 14, 2017 @11:43AM (#13868427)
What do you think happen with all hybrid platforms ? I.e react native, Cordova, ionic , other , they all load js assets remotely.

Even w/o hybrid platform, developers today are loading js assets remotely, and basically inject new code - All THE TIME.

what Apple did is just flagging the ones that are most upfront about it, but everyone can do it, hence the rollout suggestion IMHO